etc - zygaena/hammerhead

root / base / usr / src / cmd / cmd-inet / etc
etc Plain Text 2417 lines 79.4 KB
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 1990, 2010, Oracle and/or its affiliates. All rights reserved.
# Copyright 2022 Garrett D'Amore

SYMPROG= hosts inetd.conf networks protocols services netmasks

# New /etc/inet files shouldn't have /etc entries.
EDITPROG= ipaddrsel.conf ipsecalgs
PROG= datemsk.ndpd ipsecinit.sample ipqosconf.1.sample ipqosconf.2.sample \
    ipqosconf.3.sample
ETCPROG= $(SYMPROG) $(EDITPROG) $(PROG)
# Hammerhead: removed init.d (SysV-init pppd wrapper; zyginit replaces SMF/SysV).
SUBDIRS= default dhcp ike ppp secret sock2path.d

include ../../Makefile.cmd

all:		TARGET= all
install:	TARGET= install

ROOTVAR=	$(ROOT)/var
INETETCDIR=	$(ROOTETC)/inet
INETVARDIR=	$(ROOTVAR)/inet
DIRS=		$(INETETCDIR) $(INETVARDIR)
SYMDIR=		inet
ETCINETPROG=	$(ETCPROG:%=$(INETETCDIR)/%)
EDITFILES=	$(SYMPROG:%=$(INETETCDIR)/%) $(EDITPROG:%=$(INETETCDIR)/%)
# Only old /etc/inet files get symlinks in /etc.
SYMETCPROG=	$(SYMPROG:%=sym_%)
SYMIPNODES=	$(INETETCDIR)/ipnodes

FILEMODE= 0444

.KEEP_STATE:

$(EDITFILES) : FILEMODE= 0644

all: $(ETCPROG) $(SUBDIRS)

install: all $(DIRS) $(ETCINETPROG) $(SYMETCPROG) $(SYMIPNODES) $(SUBDIRS)

$(SYMIPNODES) :
	$(RM) $@
	$(SYMLINK) ./hosts $@

$(INETETCDIR)/% : %
	$(INS.file)

sym_% : %
	$(RM) $(ROOTETC)/$<
	$(SYMLINK) $(SYMDIR)/$< $(ROOTETC)/$<

$(DIRS):
	$(INS.dir)

$(SUBDIRS): FRC $(DIRS)
	@cd $@; pwd; $(MAKE) $(TARGET)

FRC:

# datemsk.ndpd is generated from datemsk.template because of a side-effect of
# SCCS.  Some of the datemsk.ndpd format strings include "%<letter>%", which
# SCCS confuses for ID keywords.  datemsk.template should quote the "%"
# with "\" and code below will filter out the "\".  Only datemsk.ndpd format
# strings next to each other need to be quoted.

datemsk.ndpd: datemsk.template
	@while read i; do echo $$i; done < datemsk.template > $@

clean clobber:
	$(RM) datemsk.ndpd

lint:
%Y-%m-%d\%t\%R
%Y-%m-%d
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
#ident	"%Z%%M%	%I%	%E% SMI"
#
# cmd/cmd-inet/etc/default/Makefile

DEFAULTFILES=	inetinit.dfl ipsec.dfl

include ../../../Makefile.cmd

all clean lint:

install: all $(ROOTETCDEFAULTFILES)

include ../../../Makefile.targ

.KEEP_STATE:
.PARALLEL:
#
# Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# ident	"%Z%%M%	%I%	%E% SMI"
#
# TCP_STRONG_ISS sets the TCP initial sequence number generation parameters.
# Set TCP_STRONG_ISS to be:
#	0 = Old-fashioned sequential initial sequence number generation.
#	1 = Improved sequential generation, with random variance in increment.
#	2 = RFC 1948 sequence number generation, unique-per-connection-ID.
#
TCP_STRONG_ISS=2
#
# ACCEPT6TO4RELAY sets the policy for 6to4 tunnels communicating with 6to4
# Relay Routers as defined in RFC 3056.  Traffic sent from a 6to4 site to a
# native IPv6 host will be tunneled over the IPv4 Internet to a 6to4 Relay
# Router before being delivered to the native IPv6 host.  Enabling support
# for sending/receiving traffic to/from a 6to4 Relay Router can create a
# security risk for a 6to4 site, since there is no default trust
# mechanism for communicating with Relay Routers.  Communication support
# with 6to4 Relay Routers has been disabled by default.  ACCEPT6TO4RELAY
# can be set to the following values:
#	NO = Disables communication with 6to4 Relay Routers
#	YES = Enables communication with 6to4 Relay Routers and thus native
#	    IPv6 hosts through a 6to4 tunnel.
#
# When ACCEPT6TO4RELAY=YES, RELAY6TO4ADDR will be used to determine the
# destination IPv4 address to be used as a tunnel endpoint when communicating
# with 6to4 Relay Routers.  192.88.99.1 is the well-known 6to4 Relay Router
# Anycast address as defined in RFC 3068.  This value may be changed to
# the IPv4 unicast address of a particular 6to4 Relay Router, if desired.
#
ACCEPT6TO4RELAY=NO
RELAY6TO4ADDR="192.88.99.1"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# ident	"%Z%%M%	%I%	%E% SMI"
#
# IKE CONFIGURATION:
# This file is read once by each in.iked process.
#
# IKE_CONFIG defines the default IKE config file pathname.  By default, it
# is /etc/inet/ike/config
#IKE_CONFIG=/etc/inet/ike/config
#
# IKE_DEBUG sets the initial debug level within the IKE daemon; by default, 
# no debug messages are logged.
#IKE_DEBUG=
#
# IKE_DEBUG_FILE controls where IKE debug output goes if enabled.  By default, 
# it goes to stderr (the console, when started at boot time, which is usually 
# not what you want)
#IKE_DEBUG_FILE=
# 
# IKE_ADM_PRIV sets the ikeadm "privilege level", which determines how
# much ikeadm is allowed to control while in.iked is running.
# Possible values are: 
#		base			ikeadm may not change keys
# 		modkeys			ikeadm may set keys.
#		keymat			ikeadm may set and get keys.
#IKE_ADM_PRIV=base



#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# cmd/cmd-inet/etc/dhcp/Makefile
#

DHCPFILES=	inittab inittab6

include ../../../Makefile.cmd

ETCDHCPDIR=	$(ROOTETC)/dhcp
ETCDHCPFILES=	$(DHCPFILES:%=$(ETCDHCPDIR)/%)

FILEMODE=	0644

.KEEP_STATE:

all:
install:	$(ETCDHCPFILES)

$(ETCDHCPDIR)/%: %
		$(INS.file)
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
# Copyright (c) 2016, Chris Fraire <cfraire@me.com>.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# This file provides information about all supported DHCP options, for
# use by DHCP-related programs.  This file should only be modified to
# add support for SITE options for clients; no existing options should
# be modified.  Only SITE options will be preserved during an upgrade.
# If you need to configure the Solaris DHCP server to support the vendor 
# options of a different client, see dhcptab(5) for details.
#
# Please consult dhcp_inittab(5) for further information.  Note that
# this interface is "Unstable" as defined by attributes(7).
#

Subnet		STANDARD,	1,	IP,	   1,	1,	sdmi
UTCoffst	STANDARD,	2,	SNUMBER32, 1,	1,	sdmi
Router		STANDARD,	3,	IP,	   1,	0,	sdmi
Timeserv	STANDARD,	4,	IP,	   1,	0,	sdmi
IEN116ns	STANDARD,	5,	IP,	   1,	0,	sdmi
DNSserv		STANDARD,	6,	IP,	   1,	0,	sdmi
Logserv		STANDARD,	7,	IP,	   1,	0,	sdmi
Cookie		STANDARD,	8,	IP,	   1,	0,	sdmi
Lprserv		STANDARD,	9,	IP,	   1,	0,	sdmi
Impress		STANDARD,	10,	IP,	   1,	0,	sdmi
Resource	STANDARD,	11,	IP,	   1,	0,	sdmi
Hostname	STANDARD,	12,	ASCII,	   1,	0,	si
Bootsize	STANDARD,	13,	UNUMBER16, 1,	1,	sdmi
Dumpfile	STANDARD,	14,	ASCII,	   1,	0,	sdmi
DNSdmain	STANDARD,	15,	ASCII,	   1,	0,	sdmi
Swapserv	STANDARD,	16,	IP,	   1,	1,	sdmi
Rootpath	STANDARD,	17,	ASCII,	   1,	0,	sdmi
ExtendP		STANDARD,	18,	ASCII,	   1,	0,	sdmi
IpFwdF		STANDARD,	19,	UNUMBER8,  1,	1,	sdmi
NLrouteF	STANDARD,	20,	UNUMBER8,  1,	1,	sdmi
PFilter		STANDARD,	21,	IP,	   2,	0,	sdmi
MaxIpSiz	STANDARD,	22,	UNUMBER16, 1,	1,	sdmi
IpTTL		STANDARD,	23,	UNUMBER8,  1,	1,	sdmi
PathTO		STANDARD,	24,	UNUMBER32, 1,	1,	sdmi
PathTbl		STANDARD,	25,	UNUMBER16, 1,	0,	sdmi
MTU		STANDARD,	26,	UNUMBER16, 1,	1,	sdmi
SameMtuF	STANDARD,	27,	UNUMBER8,  1,	1,	sdmi
Broadcst	STANDARD,	28,	IP,	   1,	1,	sdmi
MaskDscF	STANDARD,	29,	UNUMBER8,  1,	1,	sdmi
MaskSupF	STANDARD,	30,	UNUMBER8,  1,	1,	sdmi
RDiscvyF	STANDARD,	31,	UNUMBER8,  1,	1,	sdmi
RSolictS	STANDARD,	32,	IP,	   1,	1,	sdmi
StaticRt	STANDARD,	33,	IP,	   2,	0,	sdmi
TrailerF	STANDARD,	34,	UNUMBER8,  1,	1,	sdmi
ArpTimeO	STANDARD,	35,	UNUMBER32, 1,	1,	sdmi
EthEncap	STANDARD,	36,	UNUMBER8,  1,	1,	sdmi
TcpTTL		STANDARD,	37,	UNUMBER8,  1,	1,	sdmi
TcpKaInt	STANDARD,	38,	UNUMBER32, 1,	1,	sdmi
TcpKaGbF	STANDARD,	39,	UNUMBER8,  1,	1,	sdmi
NISdmain	STANDARD,	40,	ASCII,	   1,	0,	sdmi
NISservs	STANDARD,	41,	IP,	   1,	0,	sdmi
NTPservs	STANDARD,	42,	IP,	   1,	0,	sdmi
Vendor		STANDARD,	43,	OCTET,	   1,	0,	sdi
NetBNms		STANDARD,	44,	IP,	   1,	0,	sdmi
NetBDsts	STANDARD,	45,	IP,	   1,	0,	sdmi
NetBNdT		STANDARD,	46,	UNUMBER8,  1,	1,	sdmi
NetBScop	STANDARD,	47,	ASCII,	   1,	0,	sdmi
XFontSrv	STANDARD,	48,	IP,	   1,	0,	sdmi
XDispMgr	STANDARD,	49,	IP,	   1,	0,	sdmi
ReqIP		STANDARD,	50,	IP,	   1,	1,	sdi
LeaseTim	STANDARD,	51,	UNUMBER32, 1,	1,	sdmi
OptOvrld	STANDARD,	52,	UNUMBER8,  1,	1,	sdi
DHCPType	STANDARD,	53,	UNUMBER8,  1,	1,	sdi
ServerID	STANDARD,	54,	IP,	   1,	1,	sdi
ReqList		STANDARD,	55,	OCTET,	   1,	0,	sdi
Message		STANDARD,	56,	ASCII,	   1,	0,	sdi
DHCP_MTU	STANDARD,	57,	UNUMBER16, 1,	1,	sdi
T1Time		STANDARD,	58,	UNUMBER32, 1,	1,	sdmi
T2Time		STANDARD,	59,	UNUMBER32, 1,	1,	sdmi
ClassID		STANDARD,	60,	ASCII,	   1,	0,	sdi
ClientID	STANDARD,	61,	OCTET,	   1,	0,	sdi
NW_dmain	STANDARD,	62,	ASCII,	   1,	0,	sdmi
NWIPOpts	STANDARD,	63,	OCTET,	   1,	128,	sdmi
NIS+dom		STANDARD,	64,	ASCII,	   1,	0,	sdmi
NIS+serv	STANDARD,	65,	IP,	   1,	0,	sdmi
TFTPsrvN	STANDARD,	66,	ASCII,	   1,	64,	sdmi
OptBootF	STANDARD,	67,	ASCII,	   1,	128,	sdmi
MblIPAgt	STANDARD,	68,	IP,	   1,	0,	sdmi
SMTPserv	STANDARD,	69,	IP,	   1,	0,	sdmi
POP3serv	STANDARD,	70,	IP,	   1,	0,	sdmi
NNTPserv	STANDARD,	71,	IP,	   1,	0,	sdmi
WWWservs	STANDARD,	72,	IP,	   1,	0,	sdmi
Fingersv	STANDARD,	73,	IP,	   1,	0,	sdmi
IRCservs	STANDARD,	74,	IP,	   1,	0,	sdmi
STservs		STANDARD,	75,	IP,	   1,	0,	sdmi
STDAservs	STANDARD,	76,	IP,	   1,	0,	sdmi
UserClas	STANDARD,	77,	ASCII,	   1,	0,	sdi
SLP_DA		STANDARD,	78,	OCTET,	   1,	0,	sdmi
SLP_SS		STANDARD,	79,	OCTET,	   1,	0,	sdmi
ClientFQDN	STANDARD,	81,	OCTET,	   1,	0,	sdmi
AgentOpt	STANDARD,	82,	OCTET,	   1,	0,	sdi
FQDN		STANDARD,	89,	OCTET,	   1,	0,	sdmi

#
# DHCP packet fields.	Code field is byte offset into DHCP packet.
#

Opcode		FIELD,		0,	UNUMBER8,  1,	1,	id
Htype		FIELD,		1,	UNUMBER8,  1,	1,	id
HLen		FIELD,		2,	UNUMBER8,  1,	1,	id
Hops		FIELD,		3,	UNUMBER8,  1,	1,	id
Xid		FIELD,		4,	UNUMBER32, 1,	1,	id
Secs		FIELD,		8,	UNUMBER16, 1,	1,	id
Flags		FIELD,		10,	OCTET,	   1,	2,	id
Ciaddr		FIELD,		12,	IP,	   1,	1,	id
Yiaddr		FIELD,		16,	IP,	   1,	1,	id
BootSrvA	FIELD,		20,	IP,	   1,	1,	idm
Giaddr		FIELD,		24,	IP,	   1,	1,	id
Chaddr		FIELD,		28,	OCTET,	   1,	16,	id
BootSrvN	FIELD,		44,	ASCII,	   1,	64,	idm
BootFile	FIELD,		108,	ASCII,	   1,	128,	idm
Magic		FIELD,		236,	OCTET,	   1,	4,	id
Options		FIELD,		240,	OCTET,	   1,	60,	id


#
# Internal fields.
#

Hostname	INTERNAL,	1024,	BOOL,	   0,	0,	dm
LeaseNeg	INTERNAL,	1025,	BOOL,	   0,	0,	dm
EchoVC		INTERNAL,	1026,	BOOL,	   0,	0,	dm
BootPath	INTERNAL,	1027,	ASCII,	   1,	128,	dm


#
# SunOS vendor space -- see the Solaris System Administrator
# documentation for more information on these options. 
#

SrootOpt	VENDOR,		1,	ASCII,	   1,	0,	smi
SrootIP4	VENDOR,		2,	IP,	   1,	1,	smi
SrootNM		VENDOR,		3,	ASCII,	   1,	0,	smi
SrootPTH	VENDOR,		4,	ASCII,	   1,	0,	smi
SswapIP4	VENDOR,		5,	IP,	   1,	1,	smi
SswapPTH	VENDOR,		6,	ASCII,	   1,	0,	smi
SbootFIL	VENDOR,		7,	ASCII,	   1,	0,	smi
Stz		VENDOR,		8,	ASCII,	   1,	0,	smi
SbootRS		VENDOR,		9,	UNUMBER16, 1,	1,	smi
SinstIP4	VENDOR,		10,	IP,	   1,	1,	smi
SinstNM		VENDOR,		11,	ASCII,	   1,	0,	smi
SinstPTH	VENDOR,		12,	ASCII,	   1,	0,	smi
SsysidCF	VENDOR,		13,	ASCII,	   1,	0,	smi
SjumpsCF	VENDOR,		14,	ASCII,	   1,	0,	smi
Sterm		VENDOR,		15,	ASCII,	   1,	0,	smi
SbootURI	VENDOR,		16,	ASCII,	   1,	0,	smi
SHTTPproxy	VENDOR,		17,	ASCII,	   1,	0,	smi

#
# Site option example:
# The following option describes an option named ipPairs, that is in
# the  SITE category, meaning it is defined by each individual site.
# It is option code 132, which is of type IP Address, consisting of
# a potentially infinite number of pairs of IP addresses.  (See
# dhcp_inittab(5) for details)
#
# ipPairs     SITE,           132,    IP,     2,      0,      sdmi
#
#
# Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# This file provides information about all supported DHCPv6 options, for
# use by DHCPv6-related programs.
#
# Please consult dhcp_inittab(5) for further information.  Note that
# this interface is "Uncommitted" as defined by attributes(7).
#
# Note: options 10 and 35 are not assigned.
#
ClientID	STANDARD,	1,	DUID,	   1,	1,	sdi
ServerID	STANDARD,	2,	DUID,	   1,	1,	sdi
Preference	STANDARD,	7,	UNUMBER8,  1,	1,	sdmi
Unicast		STANDARD,	12,	IPV6,	   1,	1,	sdmi
Status		STANDARD,	13,	UNUMBER16, 1,	1,	si
RapidCommit	STANDARD,	14,	BOOL,	   0,	0,	sdi
UserClass	STANDARD,	15,	OCTET,	   1,	0,	sdi
VendorClass	STANDARD,	16,	OCTET,	   1,	0,	sdi
Reconfigure	STANDARD,	19,	UNUMBER8,  1,	1,	si
SIPNames	STANDARD,	21,	DOMAIN,	   1,	0,	sdmi
SIPAddresses	STANDARD,	22,	IPV6,	   1,	0,	sdmi
DNSAddresses	STANDARD,	23,	IPV6,	   1,	0,	sdmi
DNSSearch	STANDARD,	24,	DOMAIN,	   1,	0,	sdmi
NISServers	STANDARD,	27,	IPV6,	   1,	0,	sdmi
NIS+Servers	STANDARD,	28,	IPV6,	   1,	0,	sdmi
NISDomain	STANDARD,	29,	DOMAIN,	   1,	0,	sdmi
NIS+Domain	STANDARD,	30,	DOMAIN,	   1,	0,	sdmi
SNTPServers	STANDARD,	31,	IPV6,	   1,	0,	sdmi
InfoRefresh	STANDARD,	32,	UNUMBER32, 1,	1,	sdmi
BCMCDomain	STANDARD,	33,	DOMAIN,	   1,	0,	sdmi
BCMCAddresses	STANDARD,	34,	IPV6,	   1,	0,	sdmi
Geoconf		STANDARD,	36,	OCTET,	   1,	3,	sdmi
RemoteID	STANDARD,	37,	OCTET,	   1,	4,	si
Subscriber	STANDARD,	38,	OCTET,	   1,	0,	sdmi
ClientFQDN	STANDARD,	39,	OCTET,	   1,	0,	sdmi

#
# DHCPv6 packet fields.  Code field is byte offset into DHCPv6 packet.
#

MsgType		FIELD,		0,	UNUMBER8,  1,	1,	id
TransId		FIELD,		1,	UNUMBER24, 1,	1,	id
HopCount	FIELD,		1,	UNUMBER8,  1,	1,	id
LinkAddr	FIELD,		2,	IPV6,	   1,	1,	id
PeerAddr	FIELD,		18,	IPV6,	   1,	1,	id
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# Internet host table
#
::1		localhost
127.0.0.1	localhost loghost
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# cmd/cmd-inet/etc/ike/Makefile
#

IKEDIR=		ike
PUBLICKEYDIR=	publickeys
CRLDIR=		crls
ETCPROG=	config.sample

include ../../../Makefile.cmd

ETCINETIKEDIR=	$(ROOTETC)/inet/$(IKEDIR)
ETCINETPUBLICKEYDIR=	$(ROOTETC)/inet/$(IKEDIR)/$(PUBLICKEYDIR)
ETCINETCRLDIR=	$(ROOTETC)/inet/$(IKEDIR)/$(CRLDIR)
ETCINETIKEPROG=	$(ETCPROG:%=$(ETCINETIKEDIR)/%)

FILEMODE=	0444

.KEEP_STATE:

all:		$(ETCPROG)

install:	all $(ETCINETIKEDIR) $(ETCINETPUBLICKEYDIR) $(ETCINETIKEPROG) \
		$(ETCINETCRLDIR)

$(ETCINETIKEDIR)/% : %
		$(INS.file)

$(ETCINETIKEDIR):
		$(INS.dir)

$(ETCINETPUBLICKEYDIR) $(ETCINETCRLDIR):
		$(INS.dir)

FRC:

clean clobber lint:
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

##
## This file should be copied into /etc/inet/ike/config to enable the
## launch of the IKE daemon, in.iked(8), at boot time.  You can also
## launch the IKE daemon after creating this file without rebooting by
## invoking /usr/lib/inet/in.iked with a root shell.
##

# Consult the ike.config(5) man page for further details.  Here is a small
# example from the man page.

### BEGINNING OF FILE

### First some global parameters...

## Optional hardware acceleration parameters...
## Use the pathname of a library that supports PKCS#11 in quotes.
## The example path is for the Sun Crypto Accelerator 1000.
# pkcs11_path "/opt/SUNWconn/lib/libpkcs11.so"

## certificate parameters...

# Root certificates.  I SHOULD use a full Distinguished Name.
# I MUST have this certificate in my local filesystem, see ikecert(8).
cert_root    "C=US, O=Sun Microsystems\\, Inc., CN=Sun CA"

# Explicitly trusted certs that need no signatures, or perhaps self-signed
# ones.  Like root certificates, use full DNs for them for now.
cert_trust    "EMAIL=root@domain.org"

# Where do I send LDAP requests?
ldap_server   "ldap1.domain.org,ldap2.domain.org:389"

# Some PKI-specific tweaks...
# If you wish to ignore CRLs, uncomment this:
#ignore_crls
# If you wish to use HTTP (with name resolution) for URLs inside certs,
# uncomment this:
#use_http
# HTTP proxy and socks URLs should also be indicated if needed...
socks "socks://socks-relay.domain.org"
#proxy "http://http-proxy.domain.org:8080"

## Phase 1 transform defaults...

p1_lifetime_secs 14400
p1_nonce_len 20

## Parameters that may also show up in rules.

p1_xform { auth_method preshared oakley_group 5 auth_alg sha encr_alg 3des }
p2_pfs 2

### Now some rules...

{
   label "simple inheritor"
   local_id_type ip
   local_addr 10.1.1.1
   remote_addr 10.1.1.2
}

{
   # an index-only rule.  If I'm a receiver, and all I 
   # have are index-only rules, what do I do about inbound IKE requests?
   # Answer:  Take them all!

   label "default rule"
   # Use whatever "host" (e.g. IP address) identity is appropriate
   local_id_type ipv4

   local_addr 0.0.0.0/0
   remote_addr 0.0.0.0/0

   p2_pfs 5

   # Now I'm going to have the p1_xforms
   p1_xform
   {auth_method preshared  oakley_group 5  auth_alg md5  encr_alg blowfish }
   p1_xform
   {auth_method preshared  oakley_group 5  auth_alg md5  encr_alg 3des }

   # After said list, another keyword (or a '}') will stop xform parsing.
}

{
   # Let's try something a little more conventional.

   label "host to .80 subnet"
   local_id_type ip
   local_id "10.1.86.51"

   remote_id ""    # Take any, use remote_addr for access control.

   local_addr 10.1.86.51
   remote_addr 10.1.80.0/24

   p1_xform 
   { auth_method rsa_sig  oakley_group 5  auth_alg md5  encr_alg 3des }
   p1_xform
   { auth_method rsa_sig  oakley_group 5  auth_alg md5  encr_alg blowfish }
   p1_xform 
   { auth_method rsa_sig  oakley_group 5  auth_alg sha1  encr_alg 3des }
   p1_xform
   { auth_method rsa_sig  oakley_group 5  auth_alg sha1  encr_alg blowfish }
}

#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# Legacy configuration file for inetd(8).  See inetd.conf(5).
#
# This file is no longer directly used to configure inetd.
# The Solaris services which were formerly configured using this file
# are now configured in the Service Management Facility (see smf(7))
# using inetadm(8).
#
# Any records remaining in this file after installation or upgrade,
# or later created by installing additional software, must be converted
# to smf(7) services and imported into the smf repository using
# inetconv(8), otherwise the service will not be available.  Once
# a service has been converted using inetconv, further changes made to
# its entry here are not reflected in the service.
#
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright 2002 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# This is the IPv6 default address selection policy table.  See
# ipaddrsel(8) for details and examples.
#
# Prefix                Precedence      Label
::1/128                         50      Loopback
::/0                            40      Default
::ffff:0.0.0.0/96               35      IPv4
2002::/16                       30      6to4
2001::/32                        5      Teredo
fc00::/7                         3      ULA
::/96                            1      IPv4_Compatible
fec0::/10                        1      Site_Local
3ffe::/16                        1      6bone
# ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

# Mandatory file version identifier
fmt_version 1.0

# This configuration marks video traffic for EF PHB, i.e. Expedited Forwarding.
# Mail traffic is marked for AF11, anonymous user FTP traffic for AF12 and news
# traffic for AF13 PHBs, i.e. Assured Forwarding class 1 with drop precedences
# low medium and high respectively.
# For information on AF and EF PHBs refer to the IPQoS Administration Guide or
# the RFCs 2597 and 2598 respectively.
#
# Before this configuration file can be applied the sport parameter of the
# filter videoout needs to be given a valid port number/service name of a 
# service whose traffic you wish to apply EF to and the uid parameter of the
# filter ftpout needs to be given the uid of the user ftp. The ftp user account
# is the one used by the ftp server for anonymous logins, thus filtering on
# this enables us to capture anonymous ftp user traffic.

action {
	module ipgpc
	# Name must be ipgpc.classify for ipgpc action.
	name ipgpc.classify

	class {
		name video
		next_action markEF
	}
	class {
		name mail
		next_action markAF11
	}
	class {
		name ftp
		next_action markAF12
	}
	class {
		name news
		next_action markAF13
	}

	filter {
		name videoout
		# Source port of video traffic, given by __videoport__.
		sport __videoport__
		# Locally generated outbound traffic.
		direction LOCAL_OUT
		class video
	}
	filter {
		name mailout
		sport smtp
		direction LOCAL_OUT
		class mail
	}
	# This filter catches anonymous ftp user outgoing traffic.
	filter {
		name ftpout
		direction LOCAL_OUT
		# Traffic generated by ftp user, given by __ftp-uid__.
		uid __ftp-uid__
		class ftp
	}
	filter {
		name newsout
		sport nntp
		direction LOCAL_OUT
		class news
	}
}

# Mark the DSCP with code point EF, 101110 = 46.
action {
	module dscpmk
	name markEF
	params {
		# Set all 64 entries of dscp_map to 46 decimal.
		dscp_map {0-63:46}
		next_action continue
	}
}

# Mark the DSCP with code point AF11, 001010 = 10.
action {
	module dscpmk
	name markAF11
	params {
		dscp_map {0-63:10}
		next_action continue
	}
}

# Mark the DSCP with code point AF12, 001100 = 12.
action {
	module dscpmk
	name markAF12
	params {
		dscp_map {0-63:12}
		next_action continue
	}
}

# Mark the DSCP with code point AF13, 001110 = 14.
action {
	module dscpmk
	name markAF13
	params {
		dscp_map {0-63:14}
		next_action continue
	}
}
# ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

# Mandatory file format version identifier.
fmt_version 1.0

# Meter traffic from application (identified by source port myport) to
# somehost.somedomain, where somehost.somedomain is a valid hostname/IP address.
# Mark a packet with AF11 if it does not exceed the committed burst, AF12 if it
# exceeds committed burst, but not excess burst and AF13 if it exceeds the
# excess burst.
# For information on AF PHBs refer to the IPQoS Administration Guide or the
# RFC 2597.
#
# Before this example configuration file can be applied the sport and daddr
# parameter values in the ipgpc filter myfilter need to be given actual values.

action {
        module ipgpc
	# Name must be ipgpc.classify for ipgpc action.
	name ipgpc.classify
        
        filter {
               name myfilter
               class meter_myapp
               sport myport
	       daddr somehost.somedomain
        }
        class {
                name meter_myapp
                next_action meter5mbps
                enable_stats true
        }
        params {
                global_stats true
        }
}

# meter5mbps invokes action af11 for a packet that does not exceed the
# committed burst, af12 if it exceeds committed burst, but not excess burst
# and af13 if it exceeds excess burst.
action {
    module tokenmt
    name meter5mbps
    params {
       # Committed rate of 5 Mbps.
       committed_rate 5000000
       # Committed burst of 5 Mb.
       committed_burst 5000000
       # Excess Burst of 10 Mb.
       peak_burst 10000000
       # Action global stats enabled.
       global_stats true
       # RED action, mark DSCP with AF13.
       red_action_name af13
       # YELLOW action, mark DSCP with AF12.
       yellow_action_name af12
       # GREEN action, mark DSCP with AF13.
       green_action_name af11
       # Not color aware.
       color_aware false
    }
}

# Mark the DSCP with code point AF13, 001110 = 14.
action {
   module dscpmk
   name af13
   params {
      # Enable global stats for action.
      global_stats true
      next_action acct_classaf1
      # Set all 64 entries of dscp_map to 14 decimal.
      dscp_map {0-63:14}
   }
}

# Mark the DSCP with code point AF12, 001100 = 12.
action {
   module dscpmk
   name af12
   params {
      global_stats true
      next_action acct_classaf1
      dscp_map {0-63:12}
   }
}

# Mark the DSCP with code point AF11, 001010 = 10.
action {
   module dscpmk
   name af11
   params {
      global_stats true
      next_action acct_classaf1
      dscp_map {0-63:10}
   }
}

# Account packets for class AF1* (AF11, AF12 and AF13).
action {
   module flowacct
   name acct_classaf1
   params {
      global_stats true
      next_action continue
      # Timeout flows if packets not seen for at least 60 secs.
      timeout 60000
      # Scan the flow table every 15 secs for removing timed out flows.
      timer   15000
      # Limit number of flow records in the table to 2K.
      max_limit 2048
   }
}
# ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

# Mandatory file version identifier
fmt_version 1.0

# This configuration marks outbound web traffic ethernet
# headers on a VLAN interface with a user priority corresponding
# with the Class of Service value 1.

# Before this configuration can be applied the daddr parameter
# of filter webout needs to be given a valid ip address/hostname.

action {
	module ipgpc
	# Name must be ipgpc.classify for ipgpc action.
	name ipgpc.classify

	class {
		name web
		next_action dlmark1
	}

	filter {
		name webout
		# Source port 80.
		sport 80
		# Outgoing locally generated traffic.
		direction LOCAL_OUT
		# w.x.y.z and the interface over which this
		# packet leaves belong to the same VLAN
		# group.
		daddr w.x.y.z
		class web
	}
}

# Mark traffic ethernet header user priority with the value
# corresponding with the CoS value 1.
action {
	module dlcosmk
	name dlmark1
	params {
		# Class of Service value.	
		cos 1
		next_action continue
	}
}
#
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# DO NOT EDIT OR PARSE THIS FILE!
#
# Use the ipsecalgs(8) command to change the contents of this file.
# The algorithm descriptions contained in this file are synchronised to the
# kernel with ipsecalgs -s, the kernel validates the entries at this point.

# PROTO|protocol-id|protocol-name|exec-mode
##  NOTE:  Some protocol numbers are well-known and defined in <netdb.h>

PROTO|2|PROTO_IPSEC_AH|sync
PROTO|3|PROTO_IPSEC_ESP|sync

# ALG|protocol-id|alg-id|name,name,...|ef-id| \
#	{default/}{key,key..}or{key-key,inc}|block_size or MAC-size|\
#	[parameter,parameter..]|[flags]
#
## Note:   Parameters and flags only apply to certain algorithms.

ALG|2|0|none,any|-|0|0
ALG|2|2|hmac-md5,md5|CKM_MD5_HMAC_GENERAL|128|12
ALG|2|3|hmac-sha1,sha,sha1,sha-1,hmac-sha,hmac-sha-1|CKM_SHA_1_HMAC_GENERAL|160|12
ALG|2|5|hmac-sha256,sha256,sha-256,hmac-sha-256|CKM_SHA256_HMAC_GENERAL|256|16
ALG|2|6|hmac-sha384,sha384,sha-384,hmac-sha-384|CKM_SHA384_HMAC_GENERAL|384|24
ALG|2|7|hmac-sha512,sha512,sha-512,hmac-sha-512|CKM_SHA512_HMAC_GENERAL|512|32
ALG|3|0|any|-|0|0
ALG|3|2|des-cbc,des|CKM_DES_CBC|64|8
ALG|3|3|3des-cbc,3des|CKM_DES3_CBC|192|8
ALG|3|7|blowfish-cbc,blowfish|CKM_BLOWFISH_CBC|128|8
ALG|3|11|null|-|0|0
ALG|3|12|aes-cbc,aes|CKM_AES_CBC|128/128-256,64|16
ALG|3|14|aes-ccm8|CKM_AES_CCM|128/128-256,64|16|8,8,3|15
ALG|3|15|aes-ccm12|CKM_AES_CCM|128/128-256,64|16|8,12,3|15
ALG|3|16|aes-ccm,aes-ccm16|CKM_AES_CCM|128/128-256,64|16|8,16,3|15
ALG|3|18|aes-gcm8|CKM_AES_GCM|128/128-256,64|16|8,8,4|23
ALG|3|19|aes-gcm12|CKM_AES_GCM|128/128-256,64|16|8,12,4|23
ALG|3|20|aes-gcm,aes-gcm16|CKM_AES_GCM|128/128-256,64|16|8,16,4|23
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# This file should be copied to /etc/inet/ipsecinit.conf to enable IPsec
# systemwide policy (and as a side-effect, load IPsec kernel modules).
# Even if this file has no entries, IPsec will be loaded if
# /etc/inet/ipsecinit.conf exists.
#
# Add entries to protect the traffic using IPSEC. The entries in this
# file are currently configured using ipsecconf from inetinit script
# after /usr is mounted.
#
# For example,
#
#	 {rport 23} ipsec {encr_algs des encr_auth_algs md5}
#
# Or, in the older (but still usable) syntax
#
#        {dport 23} apply {encr_algs des encr_auth_algs md5 sa shared} 
#        {sport 23} permit {encr_algs des encr_auth_algs md5} 
#
# will protect the telnet traffic originating from the host with ESP using 
# DES and MD5.  Also:
#
#	 {raddr 10.5.5.0/24} ipsec {auth_algs any}
#
# Or, in the older (but still usable) syntax
#
#        {daddr 10.5.5.0/24} apply {auth_algs any sa shared} 
#        {saddr 10.5.5.0/24} permit {auth_algs any} 
#
# will protect traffic to/from the 10.5.5.0 subnet with AH using any available
# algorithm.
#
# To do basic filtering, a drop rule may be used. For example:
#
#	 {lport 23 dir in} drop {}
#	 {lport 23 dir out} drop {}
#
# will disallow any remote system from telnetting in.
#
# If you are using IPv6, it may be useful to bypass neighbor discovery
# to allow in.iked to work properly with on-link neighbors. To do that,
# add the following lines:
#
#	 {ulp ipv6-icmp type 133-137 dir both } pass { }
#
# This will allow neighbor discovery to work normally.
#
# WARNING:	This file is read before default routes are established, and
#		before any naming services have been started.  The
#		ipsecconf(8) command attempts to resolve names, but it will
#		fail unless the machine uses files, or DNS and the DNS server
#		is reachable via routing information before ipsecconf(8)
#		invocation.  (E.g. the DNS server is on-subnet, or DHCP
#		has loaded up the default router already.)
#
#		It is suggested that for this file, use hostnames only if
#		they are in /etc/hosts, or use numeric IP addresses.
#
#		If DNS gets used, the DNS server is implicitly trusted, which
#		could lead to compromise of this machine if the DNS server
#		has been compromised.
#
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2000 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# ident	"%Z%%M%	%I%	%E% SMI"

#
# The netmasks file associates Internet Protocol (IP) address
# masks with IP network numbers.
# 
# 	network-number	netmask
#
# The term network-number refers to a number obtained from the Internet Network
# Information Center.
#
# Both the network-number and the netmasks are specified in
# "decimal dot" notation, e.g:
#
# 		128.32.0.0 255.255.255.0
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 1992 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
#ident	"%Z%%M%	%I%	%E% SMI"	/* SVr4.0 1.1	*/
#
# The networks file associates Internet Protocol (IP) network numbers
# with network names.  The format of this file is:
# 
# 	network-name	network-number	nicnames . . .
#

#
# The loopback network is used only for intra-machine communication
#
loopback	127

#
# Internet networks
#
arpanet		10		arpa	# Historical
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# cmd/cmd-inet/etc/ppp/Makefile
#

PPPDIR=		ppp
SUBDIRS=	peers plugins
ETCPROGROOT=	pap-secrets	chap-secrets
ETCPROG=	options.tmpl options.ttya.tmpl myisp-chat.tmpl
ETCPEERS=	myisp.tmpl

include ../../../Makefile.cmd

ETCPPPDIR=	$(ROOTETC)/$(PPPDIR)
ETCPPPSUBDIRS=	$(SUBDIRS:%=$(ETCPPPDIR)/%)
ETCPEERSDIR=	$(ETCPPPDIR)/peers
ETCPPPPROG=	$(ETCPROG:%=$(ETCPPPDIR)/%) $(ETCPEERS:%=$(ETCPEERSDIR)/%)
ETCPPPPROGROOT=	$(ETCPROGROOT:%=$(ETCPPPDIR)/%)

# This is here to allow the make command to override this value;
# setting it to 0644 simplifies packaging.
SECRETSMODE=	0600

$(ETCPPPPROG)		:	FILEMODE = 0644
$(ETCPPPPROGROOT)	:	FILEMODE = $(SECRETSMODE)

.KEEP_STATE:

all:

install:	all $(ETCPPPDIR) .WAIT $(ETCPPPSUBDIRS) .WAIT \
		$(ETCPPPPROG) $(ETCPPPPROGROOT)

$(ETCPPPDIR)/% : %
		$(INS.file)

$(ETCPPPDIR) $(ETCPPPSUBDIRS):
		$(INS.dir)

$(ETCPEERSDIR)/% : %
		$(INS.file)

clean clobber lint:
#ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Secrets for authentication using CHAP (Challenge Handshake Authentication
# Protocol) are placed here.  Each line is a separate entry and consists of
# a list of space or tab separated tokens.
#
#	client	server	secret	[IP addresses ["--" options]]
#
# When authenticating to a peer (so-called "client mode;" as when dialing
# out to an ISP), the "client" will be matched using the local name and
# "server" will use the remote peer's name.  CHAP does specify an
# authenticator name, but some peers (such as Windows NT) do not provide
# a peer name, and the "remotename <name>" option should then be used.
# Typically, the "user <name>" option is also to specify the local name.
#
# When authenticating a peer (so-called "server mode;" as when allowing
# dial-up access to this system), the remote peer's name is the "client"
# and the local system name is the "server."  In this case, the privileged
# "name <name>" option is sometimes used to set the local name.  The "user
# <name>" option cannot be used.  The remote peer's name comes from the
# CHAP messages the peer sends.
#
# After the secret, which must always be clear text for CHAP, a list of
# valid IP addresses for the peer appears.  This must be present when
# acting as a server.  Usually, this is specified as "*" and actual IP
# addresses are given in the options.  If a given dial-in peer has an
# allocated IP address ("static IP addressing"), then this address may
# be given here.  If there's exactly one address, then this will be sent
# to the peer as a hint.
#
# The entry may also have extra options after a -- token.  These are
# interpreted as privileged pppd options, and may be used to enable
# proxyarp or other optional features.
#ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# This is an example chat script for dialing into a typical ISP.  See
# peers/myisp.tmpl for more information.
#
# The CONNECT string from the modem will be printed to the user's
# terminal.
#
ABORT	BUSY
ABORT	'NO CARRIER'
REPORT	CONNECT
TIMEOUT	10
""	"AT&F1"
OK	"AT&C1&D2"
SAY	"Calling myisp\n"
TIMEOUT	60
OK	"ATDT1-123-555-1212"
CONNECT \c
#ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# This is an example configuration for dialing into a typical ISP from a
# single node.  To use this example, uncomment the last line of the
# pap-secrets file and rename the template files:
#
#	mv /etc/ppp/options.tmpl /etc/ppp/options
#	mv /etc/ppp/options.ttya.tmpl /etc/ppp/options.ttya
#	mv /etc/ppp/myisp-chat.tmpl /etc/ppp/myisp-chat
#	mv /etc/ppp/peers/myisp.tmpl /etc/ppp/peers/myisp
#
# and invoke with:
#
#	pppd ttya call myisp
#
# Options in this file, /etc/ppp/options, /etc/ppp//options.<tty>,
# /etc/ppp/pap-secrets, and /etc/ppp/chap-secrets are all considered
# privileged.  Those from ~/.ppprc and the command line are privileged
# if the invoker is root, and unprivileged otherwise.
#
connect "/usr/bin/chat -f /etc/ppp/myisp-chat"	# dial into ISP
user myname		# my account name at my ISP
remotename myisp	# name of the ISP; for pap-secrets
noauth			# do not authenticate the ISP's identity (client)
noipdefault		# assume no IP address; get it from ISP
defaultroute		# install default route; ISP is Internet gateway
updetach		# log errors and CONNECT string to invoker
noccp			# ISP doesn't support free compression
#ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Privileged system-wide pppd options may be placed here.  Typically, the
# following options are used in this file:
#
#	lock		-- enable UUCP-style device locking
#	name <name>	-- set local system name for authentication
#	domain <name>	-- append domain name to local name
#	nodefaultroute	-- prevent users from installing a default route
#	noproxyarp	-- prevent users from using proxy ARP
#
# Device-specific options, such as asyncmap, should go in the per-device
# option files named /etc/ppp/options.<tty>, where <tty> is the name of
# the device.  For example, if /dev/ttya is used, then /etc/ppp/options.ttya
# will be read (if it exists).  When IP addresses are allocated per-port
# for dial-in nodes ("dynamic IP addressing"), then the remote address
# should be placed in that file as well.
#
# Peer-specific options, such as connect scripts, IP addresses, and other
# protocol options, should be placed in /etc/ppp/peers/<name>, where <name>
# is the name of the peer.  This file is then read by using the pppd "call"
# option; usually from the command line.
#
# Options in this file, /etc/ppp/options.<tty>, /etc/ppp/peers/<name>,
# /etc/ppp/pap-secrets, and /etc/ppp/chap-secrets are all considered
# privileged.  Those from ~/.ppprc and the command line are privileged
# if the invoker is root, and unprivileged otherwise.
#
lock
nodefaultroute
noproxyarp
#ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Privileged pppd options for a given physical device may be placed here.
# Typically, asyncmap, crtscts, baud rate, and other hardware-related
# options are placed here, along with remote IP addresses for dial-in
# nodes when using "dynamic IP addressing."
#
# Options in this file, /etc/ppp/options, /etc/ppp/peers/<name>,
# /etc/ppp/pap-secrets, and /etc/ppp/chap-secrets are all considered
# privileged.  Those from ~/.ppprc and the command line are privileged
# if the invoker is root, and unprivileged otherwise.
#
38400			# default baud rate for this port
asyncmap 0xa0000	# work around broken peers
:192.168.1.1		# allow dial-up users to get this address
#ident	"%Z%%M%	%I%	%E% SMI"
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Passwords for authentication using PAP (Password Authentication Protocol)
# are placed here.  Each line is a separate entry and consists of a list of
# space or tab separated tokens.
#
#	client	server	password	[IP addresses ["--" options]]
#
# When authenticating to a peer (so-called "client mode;" as when dialing
# out to an ISP), the "client" will be matched using the local name and
# "server" will use the remote peer's name.  PAP does not specify an
# authenticator name, so the "remotename <name>" option should be used.
# Typically, the "user <name>" option is also to specify the local name.
#
# When authenticating a peer (so-called "server mode;" as when allowing
# dial-up access to this system), the remote peer's name is the "client"
# and the local system name is the "server."  In this case, the privileged
# "name <name>" option is sometimes used to set the local name.  The "user
# <name>" option cannot be used.  The remote peer's name comes from the PAP
# messages the peer sends.
#
# After the password, which may be a crypt(3c) encoded password when acting
# as a server, a list of valid IP addresses for the peer appears.  This
# must be present when acting as a server.  Usually, this is specified as
# "*" and actual IP addresses are given in the options.  If a given dial-in
# peer has an allocated IP address ("static IP addressing"), then this
# address may be given here.  If there's exactly one address, then this will
# be sent to the peer as a hint.
#
# The entry may also have extra options after a -- token.  These are
# interpreted as privileged pppd options, and may be used to enable
# proxyarp or other optional features.
#
# This is provided for the "myisp" example; see peers/myisp.tmpl.
#	myname	myisp	mypassword
#ident	"%Z%%M%	%I%	%E% SMI"	/* SVr4.0 1.1	*/
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

#
# Internet (IP) protocols
#
ip		0	IP		# internet protocol, pseudo protocol number
icmp		1	ICMP		# internet control message protocol
igmp		2	IGMP		# Internet Group Management
ggp		3	GGP		# gateway-gateway protocol
ipip		4	IP-IP		# IP in IP (encapsulation)
tcp		6	TCP		# transmission control protocol
cbt		7	CBT		# Core Based Trees
egp		8	EGP		# exterior gateway protocol
igp		9	IGP		# any private interior gateway
pup		12	PUP		# PARC universal packet protocol
udp		17	UDP		# user datagram protocol
mux		18	MUX		# Multiplexing
hmp		20	HMP		# host monitoring protocol
xns-idp		22	XNS-IDP		# Xerox NS IDP
rdp		27	RDP		# "reliable datagram" protocol
idpr		35	IDPR		# Inter-Domain Policy Routing Protocol
idpr-cmtp	38	IDPR-CMTP	# IDPR Control Message Transport Protocol
sdrp		42	SDRP		# Source Demand Routing Protocol
idrp		45	IDRP		# Inter-Domain Routing Protocol
rsvp		46	RSVP		# Resource Reservation Protocol
gre		47	GRE		# Generic Routing Encapsulation
esp		50	ESP		# Encapsulating Security Payload
ah		51	AH		# Authentication Header
mobile		55	MOBILE		# IP Mobility
ospf		89	OSPFIGP		# Open Shortest Path First
pim		103	PIM		# Protocol Independent Multicast
ipcomp		108	IPComp		# IP Payload Compression Protocol
vrrp		112	VRRP		# Virtual Router Redundancy Protocol
sctp		132	SCTP		# Stream Control Transmission Protocol

#
# Internet (IPv6) extension headers
#
hopopt		0	HOPOPT		# Hop-by-hop options for IPv6
ipv6		41	IPv6		# IPv6 in IP encapsulation
ipv6-route	43	IPv6-Route	# Routing header for IPv6
ipv6-frag	44	IPv6-Frag	# Fragment header for IPv6
ipv6-icmp	58	IPv6-ICMP	# IPv6 internet control message protocol
ipv6-nonxt	59	IPv6-NoNxt	# No next header extension header for IPv6
ipv6-opts	60	IPv6-Opts	# Destination Options for IPv6
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# cmd/cmd-inet/etc/secret/Makefile
#

SECRETDIR=	secret
PRIVATEKEYDIR=	ike.privatekeys
ETCPROG=	ike.preshared ipseckeys.sample tcpkeys.sample

include ../../../Makefile.cmd

ETCINETSECRETDIR=	$(ROOTETC)/inet/$(SECRETDIR)
ETCINETPRIVATEKEYDIR=	$(ROOTETC)/inet/$(SECRETDIR)/$(PRIVATEKEYDIR)
ETCINETSECRETPROG=	$(ETCPROG:%=$(ETCINETSECRETDIR)/%)

# Be extra paranoid about /etc/inet/secret
$(ETCINETSECRETDIR):	DIRMODE=	700
$(ETCINETPRIVATEKEYDIR):	DIRMODE=	700

DIRMODE=	700
FILEMODE=	600

.KEEP_STATE:

all:		$(ETCPROG)

install:	all $(ETCINETSECRETDIR) $(ETCINETPRIVATEKEYDIR) $(ETCINETSECRETPROG)

$(ETCINETSECRETDIR)/% : %
		$(INS.file)

$(ETCINETSECRETDIR):
		$(INS.dir)

$(ETCINETPRIVATEKEYDIR):
		$(INS.dir)

FRC:

clean clobber lint:
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

# ike.preshared - Pre-shared secrets for IKE authentication.
#
# Entries are of the form:
#
# {
#	<attribute> <value>
#	...
# }
#
# Consult the man page for ike.preshared(5) for details.
#
# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License").  You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

# ipseckeys - This file takes the file format documented in ipseckey(8).
#             Note that naming services might not be available when this file
#             loads, just like ipsecinit.conf.
#
# This file should be copied into /etc/inet/secret/ipseckeys to load the
# IPsec Security Association Database (SADB).  A side-effect of this is that
# IPsec kernel modules will load.

# tcpkeys   - This file takes the file format documented in tcpkey(8).
#             Note that naming services might not be available when this file
#             loads, just like ipsecinit.conf.
#
# This file should be copied into /etc/inet/secret/tcpkeys and modified, and
# the svc:/network/tcpkey:default service enabled in order for the keys to be
# loaded into the TCP Security Association Database at boot.

# add src 192.168.1.1 dst 192.168.1.2 dport 179 authalg md5 authstring s3kr1t
# add src 192.168.1.2 dst 192.168.1.1 sport 179 authalg md5 authstring s3kr1t

#
# Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
# Copyright 2015 Joyent, Inc.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Network services, Internet style
# Look at http://www.iana.org/assignments/port-numbers for more
#
tcpmux		1/tcp
echo		7/tcp
echo		7/udp
discard		9/tcp		sink null
discard		9/udp		sink null
systat		11/tcp		users
daytime		13/tcp
daytime		13/udp
netstat		15/tcp
qotd		17/tcp				# Quote of the Day
chargen		19/tcp		ttytst source
chargen		19/udp		ttytst source
ftp-data	20/tcp
ftp		21/tcp
ftp		21/sctp
ssh		22/tcp				# Secure Shell
ssh		22/sctp
telnet		23/tcp
smtp		25/tcp		mail
time		37/tcp		timserver
time		37/udp		timserver
rlp		39/tcp				# Resource Location Protocol
rlp		39/udp				# Resource Location Protocol
name		42/udp		nameserver
whois		43/tcp		nicname		# usually to sri-nic
tacacs		49/tcp
tacacs		49/udp
domain		53/udp
domain		53/tcp
tacacs-ds	65/tcp
tacacs-ds	65/udp
bootps		67/udp				# BOOTP/DHCP server
bootpc		68/udp				# BOOTP/DHCP client
http		80/tcp		www www-http
http		80/udp		www www-http
http		80/sctp
kerberos	88/udp		kdc		# Kerberos V5 KDC
kerberos	88/tcp		kdc		# Kerberos V5 KDC
hostnames	101/tcp		hostname	# usually to sri-nic
pop2		109/tcp		pop-2		# Post Office Protocol - V2
pop3		110/tcp				# Post Office Protocol - Version 3
sunrpc		111/udp		rpcbind
sunrpc		111/tcp		rpcbind
sftp		115/tcp
imap		143/tcp		imap2		# Internet Mail Access Protocol v2
bgp		179/tcp				# Border Gateway Protocol
bgp		179/udp
bgp		179/sctp
irc		194/tcp
irc		194/udp
smux		199/tcp
smux		199/udp
imap3		220/tcp
imap3		220/udp
clearcase	371/tcp
clearcase	371/udp
ldap		389/tcp				# Lightweight Directory Access Protocol
ldap		389/udp				# Lightweight Directory Access Protocol
https		443/tcp
https		443/udp
https		443/sctp
kpasswd		464/tcp
kpasswd		464/udp
dhcpv6-client	546/udp		dhcpv6c		# DHCPv6 Client (RFC 3315)
dhcpv6-client	546/tcp
dhcpv6-server	547/udp		dhcpv6s		# DHCPv6 Server (RFC 3315)
dhcpv6-server	547/tcp
rtsp		554/tcp
rtsp		554/udp
nntps		563/tcp		snntp
nntps		563/udp		snntp
submission	587/tcp				# Mail Message Submission
submission	587/udp				#    see RFC 2476
ipp		631/tcp
ipp		631/udp
ldaps		636/tcp				# LDAP protocol over TLS/SSL (was sldap)
ldaps		636/udp				# LDAP protocol over TLS/SSL (was sldap)
silc		706/tcp
silc		706/udp
iscsi		860/tcp
iscsi		860/udp
rsync		873/tcp
rsync		873/udp
ftps-data	989/tcp
ftps-data	989/udp
ftps		990/tcp
ftps		990/udp
imaps		993/tcp
imaps		993/udp
pop3s		995/tcp
pop3s		995/udp
socks		1080/tcp
socks		1080/udp
openvpn		1194/tcp
openvpn		1194/udp
icap		1344/tcp			# Internet Content Adaptation Protocol
wins		1512/tcp
wins		1512/udp
radius		1812/tcp
radius		1812/udp
radius-acct	1813/tcp
radius-acct	1813/udp
cvspserver	2401/tcp
icpv2		3130/tcp
icpv2		3130/udp
iscsi-target	3260/tcp
iscsi-target	3260/udp
mysql		3306/tcp
mysql		3306/udp
nut		3493/tcp			# Network UPS Tools
svn		3690/tcp
svn		3690/udp
epmd		4369/tcp			# Erlang Port Mapper Daemon
epmd		4369/udp
sip		5060/tcp
sip		5060/udp
sip-tls		5061/tcp
sip-tls		5061/udp
xmpp-client	5222/tcp
xmpp-server	5269/tcp
postgresql	5432/tcp	postgres
postgresql	5432/udp	postgres
http-alt	8080/tcp	webcache	# HTTP Alternate, webcache
http-alt	8080/udp
memcache	11211/tcp
memcache	11211/udp
#
# Host specific functions
#
tftp		69/udp
rje		77/tcp
finger		79/tcp
link		87/tcp		ttylink
supdup		95/tcp
iso-tsap	102/tcp
x400		103/tcp				# ISO Mail
x400-snd	104/tcp
csnet-ns	105/tcp
uucp-path	117/tcp
nntp		119/tcp		usenet		# Network News Transfer
ntp		123/tcp				# Network Time Protocol
ntp		123/udp				# Network Time Protocol
netbios-ns	137/tcp				# NETBIOS Name Service
netbios-ns	137/udp				# NETBIOS Name Service
netbios-dgm	138/tcp				# NETBIOS Datagram Service
netbios-dgm	138/udp				# NETBIOS Datagram Service
netbios-ssn	139/tcp				# NETBIOS Session Service
netbios-ssn	139/udp				# NETBIOS Session Service
NeWS		144/tcp		news		# Window System
snmpd		161/udp		snmp		# Net-SNMP snmp daemon
slp		427/tcp		slp		# Service Location Protocol, V2
slp		427/udp		slp		# Service Location Protocol, V2
mobile-ip	434/udp		mobile-ip	# Mobile-IP
cvc_hostd	442/tcp				# Network Console
microsoft-ds	445/tcp				# Microsoft Directory Services
microsoft-ds	445/udp				# Microsoft Directory Services
ike		500/udp		ike		# Internet Key Exchange
uuidgen		697/tcp				# UUID Generator
uuidgen		697/udp				# UUID Generator
#
# UNIX specific services
#
# these are NOT officially assigned
#
rdc		121/tcp				# SNDR server daemon
exec		512/tcp
login		513/tcp
shell		514/tcp		cmd		# no passwords used
printer		515/tcp		spooler		# line printer spooler
courier		530/tcp		rpc		# experimental
uucp		540/tcp		uucpd		# uucp daemon
biff		512/udp		comsat
who		513/udp		whod
syslog		514/udp
talk		517/udp
route		520/udp		router routed
ripng		521/udp
klogin		543/tcp				# Kerberos authenticated rlogin
kshell		544/tcp		cmd		# Kerberos authenticated remote shell
new-rwho	550/udp		new-who		# experimental
rmonitor	560/udp		rmonitord	# experimental
monitor		561/udp				# experimental
pcserver	600/tcp				# ECD Integrated PC board srvr
sun-dr		665/tcp				# Remote Dynamic Reconfiguration
kerberos-adm	749/tcp				# Kerberos V5 Administration
kerberos-adm	749/udp				# Kerberos V5 Administration
kerberos-iv	750/udp				# Kerberos V4 key server
krb5_prop	754/tcp				# Kerberos V5 KDC propogation
swat		901/tcp				# Samba Web Adm.Tool
ufsd		1008/tcp	ufsd		# UFS-aware server
ufsd		1008/udp	ufsd
cvc		1495/tcp			# Network Console
ingreslock	1524/tcp
www-ldap-gw	1760/tcp			# HTTP to LDAP gateway
www-ldap-gw	1760/udp			# HTTP to LDAP gateway
listen		2766/tcp			# System V listener port
nfsd		2049/udp	nfs		# NFS server daemon (clts)
nfsd		2049/tcp	nfs		# NFS server daemon (cots)
nfsd		2049/sctp	nfs
eklogin		2105/tcp			# Kerberos encrypted rlogin
lockd		4045/udp			# NFS lock daemon/manager
lockd		4045/tcp
ipsec-nat-t	4500/udp			# IPsec NAT-Traversal
vxlan		4789/udp			# Virtual eXtensible Local Area Network (VXLAN)
mdns		5353/udp			# Multicast DNS
mdns		5353/tcp
vnc-server	5900/tcp			# VNC Server
dtspc		6112/tcp			# CDE subprocess control
servicetag	6481/udp
servicetag	6481/tcp
fs		7100/tcp			# Font server
solaris-audit	16162/tcp			# Secure remote audit logging
wnn6		22273/tcp			# Wnn6 jserver
wnn6		22273/udp			# Wnn6 jserver
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
# Copyright 2022 Garrett D'Amore
#
# cmd/cmd-inet/etc/sock2path.d/Makefile
#

SOCK2PATHFILES= \
    driver%2Fnetwork%2Fbpf \
    driver%2Fnetwork%2Frds \
    driver%2Fnetwork%2Frdsv3 \
    driver%2Fnetwork%2Fsdp \
    system%2Fkernel

include ../../../Makefile.cmd

ETCSOCK2PATHDIR=	$(ROOTETC)/sock2path.d
ETCSOCK2PATHFILES=	$(SOCK2PATHFILES:%=$(ETCSOCK2PATHDIR)/%)

FILEMODE=	0644

.KEEP_STATE:

all:
install:	$(ETCSOCK2PATHDIR) $(ETCSOCK2PATHFILES)

$(ETCSOCK2PATHDIR)/%: %
		$(INS.file)

$(ETCSOCK2PATHDIR):
		$(INS.dir)
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved.
#
# socket configuration information
#
#     Family   Type  Protocol	Dev|Module

	32	1	0	sockpfp
	32	4	0	sockpfp
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved.
#
# socket configuration information
#
#     Family   Type  Protocol	Dev|Module

	30	1	0	/dev/rds
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved.
#
# socket configuration information
#
#     Family   Type  Protocol	Dev|Module

	30	6	0	sockrds
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved.
#
# socket configuration information
#
#     Family   Type  Protocol	Dev|Module

	2	2	257	socksdp
	26	2	257	socksdp
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved.
#
# socket configuration information
#
#     Family   Type  Protocol	Dev|Module
	2	2	0	tcp
	2	2	6	tcp

	26	2	0	tcp
	26	2	6	tcp

	2	1	0	udp
	2	1	17	udp

	26	1	0	udp
	26	1	17	udp

	1	2	0	/dev/ticotsord
	1	6	0	/dev/ticotsord
	1	1	0	/dev/ticlts

	2	4	0	icmp
	26	4	0	icmp

	2	2	132	socksctp
	26	2	132	socksctp
	2	6	132	socksctp
	26	6	132	socksctp

	24	4	0	rts

	27	4	2	/dev/keysock
	29	4	1	/dev/spdsock

	31	1	0	trill