# # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1990, 2010, Oracle and/or its affiliates. All rights reserved. # Copyright 2022 Garrett D'Amore SYMPROG= hosts inetd.conf networks protocols services netmasks # New /etc/inet files shouldn't have /etc entries. EDITPROG= ipaddrsel.conf ipsecalgs PROG= datemsk.ndpd ipsecinit.sample ipqosconf.1.sample ipqosconf.2.sample \ ipqosconf.3.sample ETCPROG= $(SYMPROG) $(EDITPROG) $(PROG) # Hammerhead: removed init.d (SysV-init pppd wrapper; zyginit replaces SMF/SysV). SUBDIRS= default dhcp ike ppp secret sock2path.d include ../../Makefile.cmd all: TARGET= all install: TARGET= install ROOTVAR= $(ROOT)/var INETETCDIR= $(ROOTETC)/inet INETVARDIR= $(ROOTVAR)/inet DIRS= $(INETETCDIR) $(INETVARDIR) SYMDIR= inet ETCINETPROG= $(ETCPROG:%=$(INETETCDIR)/%) EDITFILES= $(SYMPROG:%=$(INETETCDIR)/%) $(EDITPROG:%=$(INETETCDIR)/%) # Only old /etc/inet files get symlinks in /etc. SYMETCPROG= $(SYMPROG:%=sym_%) SYMIPNODES= $(INETETCDIR)/ipnodes FILEMODE= 0444 .KEEP_STATE: $(EDITFILES) : FILEMODE= 0644 all: $(ETCPROG) $(SUBDIRS) install: all $(DIRS) $(ETCINETPROG) $(SYMETCPROG) $(SYMIPNODES) $(SUBDIRS) $(SYMIPNODES) : $(RM) $@ $(SYMLINK) ./hosts $@ $(INETETCDIR)/% : % $(INS.file) sym_% : % $(RM) $(ROOTETC)/$< $(SYMLINK) $(SYMDIR)/$< $(ROOTETC)/$< $(DIRS): $(INS.dir) $(SUBDIRS): FRC $(DIRS) @cd $@; pwd; $(MAKE) $(TARGET) FRC: # datemsk.ndpd is generated from datemsk.template because of a side-effect of # SCCS. Some of the datemsk.ndpd format strings include "%%", which # SCCS confuses for ID keywords. datemsk.template should quote the "%" # with "\" and code below will filter out the "\". Only datemsk.ndpd format # strings next to each other need to be quoted. datemsk.ndpd: datemsk.template @while read i; do echo $$i; done < datemsk.template > $@ clean clobber: $(RM) datemsk.ndpd lint: %Y-%m-%d\%t\%R %Y-%m-%d # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # #ident "%Z%%M% %I% %E% SMI" # # cmd/cmd-inet/etc/default/Makefile DEFAULTFILES= inetinit.dfl ipsec.dfl include ../../../Makefile.cmd all clean lint: install: all $(ROOTETCDEFAULTFILES) include ../../../Makefile.targ .KEEP_STATE: .PARALLEL: # # Copyright 2007 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # ident "%Z%%M% %I% %E% SMI" # # TCP_STRONG_ISS sets the TCP initial sequence number generation parameters. # Set TCP_STRONG_ISS to be: # 0 = Old-fashioned sequential initial sequence number generation. # 1 = Improved sequential generation, with random variance in increment. # 2 = RFC 1948 sequence number generation, unique-per-connection-ID. # TCP_STRONG_ISS=2 # # ACCEPT6TO4RELAY sets the policy for 6to4 tunnels communicating with 6to4 # Relay Routers as defined in RFC 3056. Traffic sent from a 6to4 site to a # native IPv6 host will be tunneled over the IPv4 Internet to a 6to4 Relay # Router before being delivered to the native IPv6 host. Enabling support # for sending/receiving traffic to/from a 6to4 Relay Router can create a # security risk for a 6to4 site, since there is no default trust # mechanism for communicating with Relay Routers. Communication support # with 6to4 Relay Routers has been disabled by default. ACCEPT6TO4RELAY # can be set to the following values: # NO = Disables communication with 6to4 Relay Routers # YES = Enables communication with 6to4 Relay Routers and thus native # IPv6 hosts through a 6to4 tunnel. # # When ACCEPT6TO4RELAY=YES, RELAY6TO4ADDR will be used to determine the # destination IPv4 address to be used as a tunnel endpoint when communicating # with 6to4 Relay Routers. 192.88.99.1 is the well-known 6to4 Relay Router # Anycast address as defined in RFC 3068. This value may be changed to # the IPv4 unicast address of a particular 6to4 Relay Router, if desired. # ACCEPT6TO4RELAY=NO RELAY6TO4ADDR="192.88.99.1" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # ident "%Z%%M% %I% %E% SMI" # # IKE CONFIGURATION: # This file is read once by each in.iked process. # # IKE_CONFIG defines the default IKE config file pathname. By default, it # is /etc/inet/ike/config #IKE_CONFIG=/etc/inet/ike/config # # IKE_DEBUG sets the initial debug level within the IKE daemon; by default, # no debug messages are logged. #IKE_DEBUG= # # IKE_DEBUG_FILE controls where IKE debug output goes if enabled. By default, # it goes to stderr (the console, when started at boot time, which is usually # not what you want) #IKE_DEBUG_FILE= # # IKE_ADM_PRIV sets the ikeadm "privilege level", which determines how # much ikeadm is allowed to control while in.iked is running. # Possible values are: # base ikeadm may not change keys # modkeys ikeadm may set keys. # keymat ikeadm may set and get keys. #IKE_ADM_PRIV=base # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # cmd/cmd-inet/etc/dhcp/Makefile # DHCPFILES= inittab inittab6 include ../../../Makefile.cmd ETCDHCPDIR= $(ROOTETC)/dhcp ETCDHCPFILES= $(DHCPFILES:%=$(ETCDHCPDIR)/%) FILEMODE= 0644 .KEEP_STATE: all: install: $(ETCDHCPFILES) $(ETCDHCPDIR)/%: % $(INS.file) # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # Copyright (c) 2016, Chris Fraire . # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # # This file provides information about all supported DHCP options, for # use by DHCP-related programs. This file should only be modified to # add support for SITE options for clients; no existing options should # be modified. Only SITE options will be preserved during an upgrade. # If you need to configure the Solaris DHCP server to support the vendor # options of a different client, see dhcptab(5) for details. # # Please consult dhcp_inittab(5) for further information. Note that # this interface is "Unstable" as defined by attributes(7). # Subnet STANDARD, 1, IP, 1, 1, sdmi UTCoffst STANDARD, 2, SNUMBER32, 1, 1, sdmi Router STANDARD, 3, IP, 1, 0, sdmi Timeserv STANDARD, 4, IP, 1, 0, sdmi IEN116ns STANDARD, 5, IP, 1, 0, sdmi DNSserv STANDARD, 6, IP, 1, 0, sdmi Logserv STANDARD, 7, IP, 1, 0, sdmi Cookie STANDARD, 8, IP, 1, 0, sdmi Lprserv STANDARD, 9, IP, 1, 0, sdmi Impress STANDARD, 10, IP, 1, 0, sdmi Resource STANDARD, 11, IP, 1, 0, sdmi Hostname STANDARD, 12, ASCII, 1, 0, si Bootsize STANDARD, 13, UNUMBER16, 1, 1, sdmi Dumpfile STANDARD, 14, ASCII, 1, 0, sdmi DNSdmain STANDARD, 15, ASCII, 1, 0, sdmi Swapserv STANDARD, 16, IP, 1, 1, sdmi Rootpath STANDARD, 17, ASCII, 1, 0, sdmi ExtendP STANDARD, 18, ASCII, 1, 0, sdmi IpFwdF STANDARD, 19, UNUMBER8, 1, 1, sdmi NLrouteF STANDARD, 20, UNUMBER8, 1, 1, sdmi PFilter STANDARD, 21, IP, 2, 0, sdmi MaxIpSiz STANDARD, 22, UNUMBER16, 1, 1, sdmi IpTTL STANDARD, 23, UNUMBER8, 1, 1, sdmi PathTO STANDARD, 24, UNUMBER32, 1, 1, sdmi PathTbl STANDARD, 25, UNUMBER16, 1, 0, sdmi MTU STANDARD, 26, UNUMBER16, 1, 1, sdmi SameMtuF STANDARD, 27, UNUMBER8, 1, 1, sdmi Broadcst STANDARD, 28, IP, 1, 1, sdmi MaskDscF STANDARD, 29, UNUMBER8, 1, 1, sdmi MaskSupF STANDARD, 30, UNUMBER8, 1, 1, sdmi RDiscvyF STANDARD, 31, UNUMBER8, 1, 1, sdmi RSolictS STANDARD, 32, IP, 1, 1, sdmi StaticRt STANDARD, 33, IP, 2, 0, sdmi TrailerF STANDARD, 34, UNUMBER8, 1, 1, sdmi ArpTimeO STANDARD, 35, UNUMBER32, 1, 1, sdmi EthEncap STANDARD, 36, UNUMBER8, 1, 1, sdmi TcpTTL STANDARD, 37, UNUMBER8, 1, 1, sdmi TcpKaInt STANDARD, 38, UNUMBER32, 1, 1, sdmi TcpKaGbF STANDARD, 39, UNUMBER8, 1, 1, sdmi NISdmain STANDARD, 40, ASCII, 1, 0, sdmi NISservs STANDARD, 41, IP, 1, 0, sdmi NTPservs STANDARD, 42, IP, 1, 0, sdmi Vendor STANDARD, 43, OCTET, 1, 0, sdi NetBNms STANDARD, 44, IP, 1, 0, sdmi NetBDsts STANDARD, 45, IP, 1, 0, sdmi NetBNdT STANDARD, 46, UNUMBER8, 1, 1, sdmi NetBScop STANDARD, 47, ASCII, 1, 0, sdmi XFontSrv STANDARD, 48, IP, 1, 0, sdmi XDispMgr STANDARD, 49, IP, 1, 0, sdmi ReqIP STANDARD, 50, IP, 1, 1, sdi LeaseTim STANDARD, 51, UNUMBER32, 1, 1, sdmi OptOvrld STANDARD, 52, UNUMBER8, 1, 1, sdi DHCPType STANDARD, 53, UNUMBER8, 1, 1, sdi ServerID STANDARD, 54, IP, 1, 1, sdi ReqList STANDARD, 55, OCTET, 1, 0, sdi Message STANDARD, 56, ASCII, 1, 0, sdi DHCP_MTU STANDARD, 57, UNUMBER16, 1, 1, sdi T1Time STANDARD, 58, UNUMBER32, 1, 1, sdmi T2Time STANDARD, 59, UNUMBER32, 1, 1, sdmi ClassID STANDARD, 60, ASCII, 1, 0, sdi ClientID STANDARD, 61, OCTET, 1, 0, sdi NW_dmain STANDARD, 62, ASCII, 1, 0, sdmi NWIPOpts STANDARD, 63, OCTET, 1, 128, sdmi NIS+dom STANDARD, 64, ASCII, 1, 0, sdmi NIS+serv STANDARD, 65, IP, 1, 0, sdmi TFTPsrvN STANDARD, 66, ASCII, 1, 64, sdmi OptBootF STANDARD, 67, ASCII, 1, 128, sdmi MblIPAgt STANDARD, 68, IP, 1, 0, sdmi SMTPserv STANDARD, 69, IP, 1, 0, sdmi POP3serv STANDARD, 70, IP, 1, 0, sdmi NNTPserv STANDARD, 71, IP, 1, 0, sdmi WWWservs STANDARD, 72, IP, 1, 0, sdmi Fingersv STANDARD, 73, IP, 1, 0, sdmi IRCservs STANDARD, 74, IP, 1, 0, sdmi STservs STANDARD, 75, IP, 1, 0, sdmi STDAservs STANDARD, 76, IP, 1, 0, sdmi UserClas STANDARD, 77, ASCII, 1, 0, sdi SLP_DA STANDARD, 78, OCTET, 1, 0, sdmi SLP_SS STANDARD, 79, OCTET, 1, 0, sdmi ClientFQDN STANDARD, 81, OCTET, 1, 0, sdmi AgentOpt STANDARD, 82, OCTET, 1, 0, sdi FQDN STANDARD, 89, OCTET, 1, 0, sdmi # # DHCP packet fields. Code field is byte offset into DHCP packet. # Opcode FIELD, 0, UNUMBER8, 1, 1, id Htype FIELD, 1, UNUMBER8, 1, 1, id HLen FIELD, 2, UNUMBER8, 1, 1, id Hops FIELD, 3, UNUMBER8, 1, 1, id Xid FIELD, 4, UNUMBER32, 1, 1, id Secs FIELD, 8, UNUMBER16, 1, 1, id Flags FIELD, 10, OCTET, 1, 2, id Ciaddr FIELD, 12, IP, 1, 1, id Yiaddr FIELD, 16, IP, 1, 1, id BootSrvA FIELD, 20, IP, 1, 1, idm Giaddr FIELD, 24, IP, 1, 1, id Chaddr FIELD, 28, OCTET, 1, 16, id BootSrvN FIELD, 44, ASCII, 1, 64, idm BootFile FIELD, 108, ASCII, 1, 128, idm Magic FIELD, 236, OCTET, 1, 4, id Options FIELD, 240, OCTET, 1, 60, id # # Internal fields. # Hostname INTERNAL, 1024, BOOL, 0, 0, dm LeaseNeg INTERNAL, 1025, BOOL, 0, 0, dm EchoVC INTERNAL, 1026, BOOL, 0, 0, dm BootPath INTERNAL, 1027, ASCII, 1, 128, dm # # SunOS vendor space -- see the Solaris System Administrator # documentation for more information on these options. # SrootOpt VENDOR, 1, ASCII, 1, 0, smi SrootIP4 VENDOR, 2, IP, 1, 1, smi SrootNM VENDOR, 3, ASCII, 1, 0, smi SrootPTH VENDOR, 4, ASCII, 1, 0, smi SswapIP4 VENDOR, 5, IP, 1, 1, smi SswapPTH VENDOR, 6, ASCII, 1, 0, smi SbootFIL VENDOR, 7, ASCII, 1, 0, smi Stz VENDOR, 8, ASCII, 1, 0, smi SbootRS VENDOR, 9, UNUMBER16, 1, 1, smi SinstIP4 VENDOR, 10, IP, 1, 1, smi SinstNM VENDOR, 11, ASCII, 1, 0, smi SinstPTH VENDOR, 12, ASCII, 1, 0, smi SsysidCF VENDOR, 13, ASCII, 1, 0, smi SjumpsCF VENDOR, 14, ASCII, 1, 0, smi Sterm VENDOR, 15, ASCII, 1, 0, smi SbootURI VENDOR, 16, ASCII, 1, 0, smi SHTTPproxy VENDOR, 17, ASCII, 1, 0, smi # # Site option example: # The following option describes an option named ipPairs, that is in # the SITE category, meaning it is defined by each individual site. # It is option code 132, which is of type IP Address, consisting of # a potentially infinite number of pairs of IP addresses. (See # dhcp_inittab(5) for details) # # ipPairs SITE, 132, IP, 2, 0, sdmi # # # Copyright 2007 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # # This file provides information about all supported DHCPv6 options, for # use by DHCPv6-related programs. # # Please consult dhcp_inittab(5) for further information. Note that # this interface is "Uncommitted" as defined by attributes(7). # # Note: options 10 and 35 are not assigned. # ClientID STANDARD, 1, DUID, 1, 1, sdi ServerID STANDARD, 2, DUID, 1, 1, sdi Preference STANDARD, 7, UNUMBER8, 1, 1, sdmi Unicast STANDARD, 12, IPV6, 1, 1, sdmi Status STANDARD, 13, UNUMBER16, 1, 1, si RapidCommit STANDARD, 14, BOOL, 0, 0, sdi UserClass STANDARD, 15, OCTET, 1, 0, sdi VendorClass STANDARD, 16, OCTET, 1, 0, sdi Reconfigure STANDARD, 19, UNUMBER8, 1, 1, si SIPNames STANDARD, 21, DOMAIN, 1, 0, sdmi SIPAddresses STANDARD, 22, IPV6, 1, 0, sdmi DNSAddresses STANDARD, 23, IPV6, 1, 0, sdmi DNSSearch STANDARD, 24, DOMAIN, 1, 0, sdmi NISServers STANDARD, 27, IPV6, 1, 0, sdmi NIS+Servers STANDARD, 28, IPV6, 1, 0, sdmi NISDomain STANDARD, 29, DOMAIN, 1, 0, sdmi NIS+Domain STANDARD, 30, DOMAIN, 1, 0, sdmi SNTPServers STANDARD, 31, IPV6, 1, 0, sdmi InfoRefresh STANDARD, 32, UNUMBER32, 1, 1, sdmi BCMCDomain STANDARD, 33, DOMAIN, 1, 0, sdmi BCMCAddresses STANDARD, 34, IPV6, 1, 0, sdmi Geoconf STANDARD, 36, OCTET, 1, 3, sdmi RemoteID STANDARD, 37, OCTET, 1, 4, si Subscriber STANDARD, 38, OCTET, 1, 0, sdmi ClientFQDN STANDARD, 39, OCTET, 1, 0, sdmi # # DHCPv6 packet fields. Code field is byte offset into DHCPv6 packet. # MsgType FIELD, 0, UNUMBER8, 1, 1, id TransId FIELD, 1, UNUMBER24, 1, 1, id HopCount FIELD, 1, UNUMBER8, 1, 1, id LinkAddr FIELD, 2, IPV6, 1, 1, id PeerAddr FIELD, 18, IPV6, 1, 1, id # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # Internet host table # ::1 localhost 127.0.0.1 localhost loghost # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # cmd/cmd-inet/etc/ike/Makefile # IKEDIR= ike PUBLICKEYDIR= publickeys CRLDIR= crls ETCPROG= config.sample include ../../../Makefile.cmd ETCINETIKEDIR= $(ROOTETC)/inet/$(IKEDIR) ETCINETPUBLICKEYDIR= $(ROOTETC)/inet/$(IKEDIR)/$(PUBLICKEYDIR) ETCINETCRLDIR= $(ROOTETC)/inet/$(IKEDIR)/$(CRLDIR) ETCINETIKEPROG= $(ETCPROG:%=$(ETCINETIKEDIR)/%) FILEMODE= 0444 .KEEP_STATE: all: $(ETCPROG) install: all $(ETCINETIKEDIR) $(ETCINETPUBLICKEYDIR) $(ETCINETIKEPROG) \ $(ETCINETCRLDIR) $(ETCINETIKEDIR)/% : % $(INS.file) $(ETCINETIKEDIR): $(INS.dir) $(ETCINETPUBLICKEYDIR) $(ETCINETCRLDIR): $(INS.dir) FRC: clean clobber lint: # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # ## ## This file should be copied into /etc/inet/ike/config to enable the ## launch of the IKE daemon, in.iked(8), at boot time. You can also ## launch the IKE daemon after creating this file without rebooting by ## invoking /usr/lib/inet/in.iked with a root shell. ## # Consult the ike.config(5) man page for further details. Here is a small # example from the man page. ### BEGINNING OF FILE ### First some global parameters... ## Optional hardware acceleration parameters... ## Use the pathname of a library that supports PKCS#11 in quotes. ## The example path is for the Sun Crypto Accelerator 1000. # pkcs11_path "/opt/SUNWconn/lib/libpkcs11.so" ## certificate parameters... # Root certificates. I SHOULD use a full Distinguished Name. # I MUST have this certificate in my local filesystem, see ikecert(8). cert_root "C=US, O=Sun Microsystems\\, Inc., CN=Sun CA" # Explicitly trusted certs that need no signatures, or perhaps self-signed # ones. Like root certificates, use full DNs for them for now. cert_trust "EMAIL=root@domain.org" # Where do I send LDAP requests? ldap_server "ldap1.domain.org,ldap2.domain.org:389" # Some PKI-specific tweaks... # If you wish to ignore CRLs, uncomment this: #ignore_crls # If you wish to use HTTP (with name resolution) for URLs inside certs, # uncomment this: #use_http # HTTP proxy and socks URLs should also be indicated if needed... socks "socks://socks-relay.domain.org" #proxy "http://http-proxy.domain.org:8080" ## Phase 1 transform defaults... p1_lifetime_secs 14400 p1_nonce_len 20 ## Parameters that may also show up in rules. p1_xform { auth_method preshared oakley_group 5 auth_alg sha encr_alg 3des } p2_pfs 2 ### Now some rules... { label "simple inheritor" local_id_type ip local_addr 10.1.1.1 remote_addr 10.1.1.2 } { # an index-only rule. If I'm a receiver, and all I # have are index-only rules, what do I do about inbound IKE requests? # Answer: Take them all! label "default rule" # Use whatever "host" (e.g. IP address) identity is appropriate local_id_type ipv4 local_addr 0.0.0.0/0 remote_addr 0.0.0.0/0 p2_pfs 5 # Now I'm going to have the p1_xforms p1_xform {auth_method preshared oakley_group 5 auth_alg md5 encr_alg blowfish } p1_xform {auth_method preshared oakley_group 5 auth_alg md5 encr_alg 3des } # After said list, another keyword (or a '}') will stop xform parsing. } { # Let's try something a little more conventional. label "host to .80 subnet" local_id_type ip local_id "10.1.86.51" remote_id "" # Take any, use remote_addr for access control. local_addr 10.1.86.51 remote_addr 10.1.80.0/24 p1_xform { auth_method rsa_sig oakley_group 5 auth_alg md5 encr_alg 3des } p1_xform { auth_method rsa_sig oakley_group 5 auth_alg md5 encr_alg blowfish } p1_xform { auth_method rsa_sig oakley_group 5 auth_alg sha1 encr_alg 3des } p1_xform { auth_method rsa_sig oakley_group 5 auth_alg sha1 encr_alg blowfish } } # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # # Copyright 2004 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # Legacy configuration file for inetd(8). See inetd.conf(5). # # This file is no longer directly used to configure inetd. # The Solaris services which were formerly configured using this file # are now configured in the Service Management Facility (see smf(7)) # using inetadm(8). # # Any records remaining in this file after installation or upgrade, # or later created by installing additional software, must be converted # to smf(7) services and imported into the smf repository using # inetconv(8), otherwise the service will not be available. Once # a service has been converted using inetconv, further changes made to # its entry here are not reflected in the service. # # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # # Copyright 2002 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # This is the IPv6 default address selection policy table. See # ipaddrsel(8) for details and examples. # # Prefix Precedence Label ::1/128 50 Loopback ::/0 40 Default ::ffff:0.0.0.0/96 35 IPv4 2002::/16 30 6to4 2001::/32 5 Teredo fc00::/7 3 ULA ::/96 1 IPv4_Compatible fec0::/10 1 Site_Local 3ffe::/16 1 6bone # ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Mandatory file version identifier fmt_version 1.0 # This configuration marks video traffic for EF PHB, i.e. Expedited Forwarding. # Mail traffic is marked for AF11, anonymous user FTP traffic for AF12 and news # traffic for AF13 PHBs, i.e. Assured Forwarding class 1 with drop precedences # low medium and high respectively. # For information on AF and EF PHBs refer to the IPQoS Administration Guide or # the RFCs 2597 and 2598 respectively. # # Before this configuration file can be applied the sport parameter of the # filter videoout needs to be given a valid port number/service name of a # service whose traffic you wish to apply EF to and the uid parameter of the # filter ftpout needs to be given the uid of the user ftp. The ftp user account # is the one used by the ftp server for anonymous logins, thus filtering on # this enables us to capture anonymous ftp user traffic. action { module ipgpc # Name must be ipgpc.classify for ipgpc action. name ipgpc.classify class { name video next_action markEF } class { name mail next_action markAF11 } class { name ftp next_action markAF12 } class { name news next_action markAF13 } filter { name videoout # Source port of video traffic, given by __videoport__. sport __videoport__ # Locally generated outbound traffic. direction LOCAL_OUT class video } filter { name mailout sport smtp direction LOCAL_OUT class mail } # This filter catches anonymous ftp user outgoing traffic. filter { name ftpout direction LOCAL_OUT # Traffic generated by ftp user, given by __ftp-uid__. uid __ftp-uid__ class ftp } filter { name newsout sport nntp direction LOCAL_OUT class news } } # Mark the DSCP with code point EF, 101110 = 46. action { module dscpmk name markEF params { # Set all 64 entries of dscp_map to 46 decimal. dscp_map {0-63:46} next_action continue } } # Mark the DSCP with code point AF11, 001010 = 10. action { module dscpmk name markAF11 params { dscp_map {0-63:10} next_action continue } } # Mark the DSCP with code point AF12, 001100 = 12. action { module dscpmk name markAF12 params { dscp_map {0-63:12} next_action continue } } # Mark the DSCP with code point AF13, 001110 = 14. action { module dscpmk name markAF13 params { dscp_map {0-63:14} next_action continue } } # ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Mandatory file format version identifier. fmt_version 1.0 # Meter traffic from application (identified by source port myport) to # somehost.somedomain, where somehost.somedomain is a valid hostname/IP address. # Mark a packet with AF11 if it does not exceed the committed burst, AF12 if it # exceeds committed burst, but not excess burst and AF13 if it exceeds the # excess burst. # For information on AF PHBs refer to the IPQoS Administration Guide or the # RFC 2597. # # Before this example configuration file can be applied the sport and daddr # parameter values in the ipgpc filter myfilter need to be given actual values. action { module ipgpc # Name must be ipgpc.classify for ipgpc action. name ipgpc.classify filter { name myfilter class meter_myapp sport myport daddr somehost.somedomain } class { name meter_myapp next_action meter5mbps enable_stats true } params { global_stats true } } # meter5mbps invokes action af11 for a packet that does not exceed the # committed burst, af12 if it exceeds committed burst, but not excess burst # and af13 if it exceeds excess burst. action { module tokenmt name meter5mbps params { # Committed rate of 5 Mbps. committed_rate 5000000 # Committed burst of 5 Mb. committed_burst 5000000 # Excess Burst of 10 Mb. peak_burst 10000000 # Action global stats enabled. global_stats true # RED action, mark DSCP with AF13. red_action_name af13 # YELLOW action, mark DSCP with AF12. yellow_action_name af12 # GREEN action, mark DSCP with AF13. green_action_name af11 # Not color aware. color_aware false } } # Mark the DSCP with code point AF13, 001110 = 14. action { module dscpmk name af13 params { # Enable global stats for action. global_stats true next_action acct_classaf1 # Set all 64 entries of dscp_map to 14 decimal. dscp_map {0-63:14} } } # Mark the DSCP with code point AF12, 001100 = 12. action { module dscpmk name af12 params { global_stats true next_action acct_classaf1 dscp_map {0-63:12} } } # Mark the DSCP with code point AF11, 001010 = 10. action { module dscpmk name af11 params { global_stats true next_action acct_classaf1 dscp_map {0-63:10} } } # Account packets for class AF1* (AF11, AF12 and AF13). action { module flowacct name acct_classaf1 params { global_stats true next_action continue # Timeout flows if packets not seen for at least 60 secs. timeout 60000 # Scan the flow table every 15 secs for removing timed out flows. timer 15000 # Limit number of flow records in the table to 2K. max_limit 2048 } } # ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Mandatory file version identifier fmt_version 1.0 # This configuration marks outbound web traffic ethernet # headers on a VLAN interface with a user priority corresponding # with the Class of Service value 1. # Before this configuration can be applied the daddr parameter # of filter webout needs to be given a valid ip address/hostname. action { module ipgpc # Name must be ipgpc.classify for ipgpc action. name ipgpc.classify class { name web next_action dlmark1 } filter { name webout # Source port 80. sport 80 # Outgoing locally generated traffic. direction LOCAL_OUT # w.x.y.z and the interface over which this # packet leaves belong to the same VLAN # group. daddr w.x.y.z class web } } # Mark traffic ethernet header user priority with the value # corresponding with the CoS value 1. action { module dlcosmk name dlmark1 params { # Class of Service value. cos 1 next_action continue } } # # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # DO NOT EDIT OR PARSE THIS FILE! # # Use the ipsecalgs(8) command to change the contents of this file. # The algorithm descriptions contained in this file are synchronised to the # kernel with ipsecalgs -s, the kernel validates the entries at this point. # PROTO|protocol-id|protocol-name|exec-mode ## NOTE: Some protocol numbers are well-known and defined in PROTO|2|PROTO_IPSEC_AH|sync PROTO|3|PROTO_IPSEC_ESP|sync # ALG|protocol-id|alg-id|name,name,...|ef-id| \ # {default/}{key,key..}or{key-key,inc}|block_size or MAC-size|\ # [parameter,parameter..]|[flags] # ## Note: Parameters and flags only apply to certain algorithms. ALG|2|0|none,any|-|0|0 ALG|2|2|hmac-md5,md5|CKM_MD5_HMAC_GENERAL|128|12 ALG|2|3|hmac-sha1,sha,sha1,sha-1,hmac-sha,hmac-sha-1|CKM_SHA_1_HMAC_GENERAL|160|12 ALG|2|5|hmac-sha256,sha256,sha-256,hmac-sha-256|CKM_SHA256_HMAC_GENERAL|256|16 ALG|2|6|hmac-sha384,sha384,sha-384,hmac-sha-384|CKM_SHA384_HMAC_GENERAL|384|24 ALG|2|7|hmac-sha512,sha512,sha-512,hmac-sha-512|CKM_SHA512_HMAC_GENERAL|512|32 ALG|3|0|any|-|0|0 ALG|3|2|des-cbc,des|CKM_DES_CBC|64|8 ALG|3|3|3des-cbc,3des|CKM_DES3_CBC|192|8 ALG|3|7|blowfish-cbc,blowfish|CKM_BLOWFISH_CBC|128|8 ALG|3|11|null|-|0|0 ALG|3|12|aes-cbc,aes|CKM_AES_CBC|128/128-256,64|16 ALG|3|14|aes-ccm8|CKM_AES_CCM|128/128-256,64|16|8,8,3|15 ALG|3|15|aes-ccm12|CKM_AES_CCM|128/128-256,64|16|8,12,3|15 ALG|3|16|aes-ccm,aes-ccm16|CKM_AES_CCM|128/128-256,64|16|8,16,3|15 ALG|3|18|aes-gcm8|CKM_AES_GCM|128/128-256,64|16|8,8,4|23 ALG|3|19|aes-gcm12|CKM_AES_GCM|128/128-256,64|16|8,12,4|23 ALG|3|20|aes-gcm,aes-gcm16|CKM_AES_GCM|128/128-256,64|16|8,16,4|23 # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # This file should be copied to /etc/inet/ipsecinit.conf to enable IPsec # systemwide policy (and as a side-effect, load IPsec kernel modules). # Even if this file has no entries, IPsec will be loaded if # /etc/inet/ipsecinit.conf exists. # # Add entries to protect the traffic using IPSEC. The entries in this # file are currently configured using ipsecconf from inetinit script # after /usr is mounted. # # For example, # # {rport 23} ipsec {encr_algs des encr_auth_algs md5} # # Or, in the older (but still usable) syntax # # {dport 23} apply {encr_algs des encr_auth_algs md5 sa shared} # {sport 23} permit {encr_algs des encr_auth_algs md5} # # will protect the telnet traffic originating from the host with ESP using # DES and MD5. Also: # # {raddr 10.5.5.0/24} ipsec {auth_algs any} # # Or, in the older (but still usable) syntax # # {daddr 10.5.5.0/24} apply {auth_algs any sa shared} # {saddr 10.5.5.0/24} permit {auth_algs any} # # will protect traffic to/from the 10.5.5.0 subnet with AH using any available # algorithm. # # To do basic filtering, a drop rule may be used. For example: # # {lport 23 dir in} drop {} # {lport 23 dir out} drop {} # # will disallow any remote system from telnetting in. # # If you are using IPv6, it may be useful to bypass neighbor discovery # to allow in.iked to work properly with on-link neighbors. To do that, # add the following lines: # # {ulp ipv6-icmp type 133-137 dir both } pass { } # # This will allow neighbor discovery to work normally. # # WARNING: This file is read before default routes are established, and # before any naming services have been started. The # ipsecconf(8) command attempts to resolve names, but it will # fail unless the machine uses files, or DNS and the DNS server # is reachable via routing information before ipsecconf(8) # invocation. (E.g. the DNS server is on-subnet, or DHCP # has loaded up the default router already.) # # It is suggested that for this file, use hostnames only if # they are in /etc/hosts, or use numeric IP addresses. # # If DNS gets used, the DNS server is implicitly trusted, which # could lead to compromise of this machine if the DNS server # has been compromised. # # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 2000 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # ident "%Z%%M% %I% %E% SMI" # # The netmasks file associates Internet Protocol (IP) address # masks with IP network numbers. # # network-number netmask # # The term network-number refers to a number obtained from the Internet Network # Information Center. # # Both the network-number and the netmasks are specified in # "decimal dot" notation, e.g: # # 128.32.0.0 255.255.255.0 # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 1992 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # #ident "%Z%%M% %I% %E% SMI" /* SVr4.0 1.1 */ # # The networks file associates Internet Protocol (IP) network numbers # with network names. The format of this file is: # # network-name network-number nicnames . . . # # # The loopback network is used only for intra-machine communication # loopback 127 # # Internet networks # arpanet 10 arpa # Historical # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # cmd/cmd-inet/etc/ppp/Makefile # PPPDIR= ppp SUBDIRS= peers plugins ETCPROGROOT= pap-secrets chap-secrets ETCPROG= options.tmpl options.ttya.tmpl myisp-chat.tmpl ETCPEERS= myisp.tmpl include ../../../Makefile.cmd ETCPPPDIR= $(ROOTETC)/$(PPPDIR) ETCPPPSUBDIRS= $(SUBDIRS:%=$(ETCPPPDIR)/%) ETCPEERSDIR= $(ETCPPPDIR)/peers ETCPPPPROG= $(ETCPROG:%=$(ETCPPPDIR)/%) $(ETCPEERS:%=$(ETCPEERSDIR)/%) ETCPPPPROGROOT= $(ETCPROGROOT:%=$(ETCPPPDIR)/%) # This is here to allow the make command to override this value; # setting it to 0644 simplifies packaging. SECRETSMODE= 0600 $(ETCPPPPROG) : FILEMODE = 0644 $(ETCPPPPROGROOT) : FILEMODE = $(SECRETSMODE) .KEEP_STATE: all: install: all $(ETCPPPDIR) .WAIT $(ETCPPPSUBDIRS) .WAIT \ $(ETCPPPPROG) $(ETCPPPPROGROOT) $(ETCPPPDIR)/% : % $(INS.file) $(ETCPPPDIR) $(ETCPPPSUBDIRS): $(INS.dir) $(ETCPEERSDIR)/% : % $(INS.file) clean clobber lint: #ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Secrets for authentication using CHAP (Challenge Handshake Authentication # Protocol) are placed here. Each line is a separate entry and consists of # a list of space or tab separated tokens. # # client server secret [IP addresses ["--" options]] # # When authenticating to a peer (so-called "client mode;" as when dialing # out to an ISP), the "client" will be matched using the local name and # "server" will use the remote peer's name. CHAP does specify an # authenticator name, but some peers (such as Windows NT) do not provide # a peer name, and the "remotename " option should then be used. # Typically, the "user " option is also to specify the local name. # # When authenticating a peer (so-called "server mode;" as when allowing # dial-up access to this system), the remote peer's name is the "client" # and the local system name is the "server." In this case, the privileged # "name " option is sometimes used to set the local name. The "user # " option cannot be used. The remote peer's name comes from the # CHAP messages the peer sends. # # After the secret, which must always be clear text for CHAP, a list of # valid IP addresses for the peer appears. This must be present when # acting as a server. Usually, this is specified as "*" and actual IP # addresses are given in the options. If a given dial-in peer has an # allocated IP address ("static IP addressing"), then this address may # be given here. If there's exactly one address, then this will be sent # to the peer as a hint. # # The entry may also have extra options after a -- token. These are # interpreted as privileged pppd options, and may be used to enable # proxyarp or other optional features. #ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # This is an example chat script for dialing into a typical ISP. See # peers/myisp.tmpl for more information. # # The CONNECT string from the modem will be printed to the user's # terminal. # ABORT BUSY ABORT 'NO CARRIER' REPORT CONNECT TIMEOUT 10 "" "AT&F1" OK "AT&C1&D2" SAY "Calling myisp\n" TIMEOUT 60 OK "ATDT1-123-555-1212" CONNECT \c #ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # This is an example configuration for dialing into a typical ISP from a # single node. To use this example, uncomment the last line of the # pap-secrets file and rename the template files: # # mv /etc/ppp/options.tmpl /etc/ppp/options # mv /etc/ppp/options.ttya.tmpl /etc/ppp/options.ttya # mv /etc/ppp/myisp-chat.tmpl /etc/ppp/myisp-chat # mv /etc/ppp/peers/myisp.tmpl /etc/ppp/peers/myisp # # and invoke with: # # pppd ttya call myisp # # Options in this file, /etc/ppp/options, /etc/ppp//options., # /etc/ppp/pap-secrets, and /etc/ppp/chap-secrets are all considered # privileged. Those from ~/.ppprc and the command line are privileged # if the invoker is root, and unprivileged otherwise. # connect "/usr/bin/chat -f /etc/ppp/myisp-chat" # dial into ISP user myname # my account name at my ISP remotename myisp # name of the ISP; for pap-secrets noauth # do not authenticate the ISP's identity (client) noipdefault # assume no IP address; get it from ISP defaultroute # install default route; ISP is Internet gateway updetach # log errors and CONNECT string to invoker noccp # ISP doesn't support free compression #ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Privileged system-wide pppd options may be placed here. Typically, the # following options are used in this file: # # lock -- enable UUCP-style device locking # name -- set local system name for authentication # domain -- append domain name to local name # nodefaultroute -- prevent users from installing a default route # noproxyarp -- prevent users from using proxy ARP # # Device-specific options, such as asyncmap, should go in the per-device # option files named /etc/ppp/options., where is the name of # the device. For example, if /dev/ttya is used, then /etc/ppp/options.ttya # will be read (if it exists). When IP addresses are allocated per-port # for dial-in nodes ("dynamic IP addressing"), then the remote address # should be placed in that file as well. # # Peer-specific options, such as connect scripts, IP addresses, and other # protocol options, should be placed in /etc/ppp/peers/, where # is the name of the peer. This file is then read by using the pppd "call" # option; usually from the command line. # # Options in this file, /etc/ppp/options., /etc/ppp/peers/, # /etc/ppp/pap-secrets, and /etc/ppp/chap-secrets are all considered # privileged. Those from ~/.ppprc and the command line are privileged # if the invoker is root, and unprivileged otherwise. # lock nodefaultroute noproxyarp #ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Privileged pppd options for a given physical device may be placed here. # Typically, asyncmap, crtscts, baud rate, and other hardware-related # options are placed here, along with remote IP addresses for dial-in # nodes when using "dynamic IP addressing." # # Options in this file, /etc/ppp/options, /etc/ppp/peers/, # /etc/ppp/pap-secrets, and /etc/ppp/chap-secrets are all considered # privileged. Those from ~/.ppprc and the command line are privileged # if the invoker is root, and unprivileged otherwise. # 38400 # default baud rate for this port asyncmap 0xa0000 # work around broken peers :192.168.1.1 # allow dial-up users to get this address #ident "%Z%%M% %I% %E% SMI" # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Passwords for authentication using PAP (Password Authentication Protocol) # are placed here. Each line is a separate entry and consists of a list of # space or tab separated tokens. # # client server password [IP addresses ["--" options]] # # When authenticating to a peer (so-called "client mode;" as when dialing # out to an ISP), the "client" will be matched using the local name and # "server" will use the remote peer's name. PAP does not specify an # authenticator name, so the "remotename " option should be used. # Typically, the "user " option is also to specify the local name. # # When authenticating a peer (so-called "server mode;" as when allowing # dial-up access to this system), the remote peer's name is the "client" # and the local system name is the "server." In this case, the privileged # "name " option is sometimes used to set the local name. The "user # " option cannot be used. The remote peer's name comes from the PAP # messages the peer sends. # # After the password, which may be a crypt(3c) encoded password when acting # as a server, a list of valid IP addresses for the peer appears. This # must be present when acting as a server. Usually, this is specified as # "*" and actual IP addresses are given in the options. If a given dial-in # peer has an allocated IP address ("static IP addressing"), then this # address may be given here. If there's exactly one address, then this will # be sent to the peer as a hint. # # The entry may also have extra options after a -- token. These are # interpreted as privileged pppd options, and may be used to enable # proxyarp or other optional features. # # This is provided for the "myisp" example; see peers/myisp.tmpl. # myname myisp mypassword #ident "%Z%%M% %I% %E% SMI" /* SVr4.0 1.1 */ # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # # Internet (IP) protocols # ip 0 IP # internet protocol, pseudo protocol number icmp 1 ICMP # internet control message protocol igmp 2 IGMP # Internet Group Management ggp 3 GGP # gateway-gateway protocol ipip 4 IP-IP # IP in IP (encapsulation) tcp 6 TCP # transmission control protocol cbt 7 CBT # Core Based Trees egp 8 EGP # exterior gateway protocol igp 9 IGP # any private interior gateway pup 12 PUP # PARC universal packet protocol udp 17 UDP # user datagram protocol mux 18 MUX # Multiplexing hmp 20 HMP # host monitoring protocol xns-idp 22 XNS-IDP # Xerox NS IDP rdp 27 RDP # "reliable datagram" protocol idpr 35 IDPR # Inter-Domain Policy Routing Protocol idpr-cmtp 38 IDPR-CMTP # IDPR Control Message Transport Protocol sdrp 42 SDRP # Source Demand Routing Protocol idrp 45 IDRP # Inter-Domain Routing Protocol rsvp 46 RSVP # Resource Reservation Protocol gre 47 GRE # Generic Routing Encapsulation esp 50 ESP # Encapsulating Security Payload ah 51 AH # Authentication Header mobile 55 MOBILE # IP Mobility ospf 89 OSPFIGP # Open Shortest Path First pim 103 PIM # Protocol Independent Multicast ipcomp 108 IPComp # IP Payload Compression Protocol vrrp 112 VRRP # Virtual Router Redundancy Protocol sctp 132 SCTP # Stream Control Transmission Protocol # # Internet (IPv6) extension headers # hopopt 0 HOPOPT # Hop-by-hop options for IPv6 ipv6 41 IPv6 # IPv6 in IP encapsulation ipv6-route 43 IPv6-Route # Routing header for IPv6 ipv6-frag 44 IPv6-Frag # Fragment header for IPv6 ipv6-icmp 58 IPv6-ICMP # IPv6 internet control message protocol ipv6-nonxt 59 IPv6-NoNxt # No next header extension header for IPv6 ipv6-opts 60 IPv6-Opts # Destination Options for IPv6 # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright 2009 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # cmd/cmd-inet/etc/secret/Makefile # SECRETDIR= secret PRIVATEKEYDIR= ike.privatekeys ETCPROG= ike.preshared ipseckeys.sample tcpkeys.sample include ../../../Makefile.cmd ETCINETSECRETDIR= $(ROOTETC)/inet/$(SECRETDIR) ETCINETPRIVATEKEYDIR= $(ROOTETC)/inet/$(SECRETDIR)/$(PRIVATEKEYDIR) ETCINETSECRETPROG= $(ETCPROG:%=$(ETCINETSECRETDIR)/%) # Be extra paranoid about /etc/inet/secret $(ETCINETSECRETDIR): DIRMODE= 700 $(ETCINETPRIVATEKEYDIR): DIRMODE= 700 DIRMODE= 700 FILEMODE= 600 .KEEP_STATE: all: $(ETCPROG) install: all $(ETCINETSECRETDIR) $(ETCINETPRIVATEKEYDIR) $(ETCINETSECRETPROG) $(ETCINETSECRETDIR)/% : % $(INS.file) $(ETCINETSECRETDIR): $(INS.dir) $(ETCINETPRIVATEKEYDIR): $(INS.dir) FRC: clean clobber lint: # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # ike.preshared - Pre-shared secrets for IKE authentication. # # Entries are of the form: # # { # # ... # } # # Consult the man page for ike.preshared(5) for details. # # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # ipseckeys - This file takes the file format documented in ipseckey(8). # Note that naming services might not be available when this file # loads, just like ipsecinit.conf. # # This file should be copied into /etc/inet/secret/ipseckeys to load the # IPsec Security Association Database (SADB). A side-effect of this is that # IPsec kernel modules will load. # tcpkeys - This file takes the file format documented in tcpkey(8). # Note that naming services might not be available when this file # loads, just like ipsecinit.conf. # # This file should be copied into /etc/inet/secret/tcpkeys and modified, and # the svc:/network/tcpkey:default service enabled in order for the keys to be # loaded into the TCP Security Association Database at boot. # add src 192.168.1.1 dst 192.168.1.2 dport 179 authalg md5 authstring s3kr1t # add src 192.168.1.2 dst 192.168.1.1 sport 179 authalg md5 authstring s3kr1t # # Copyright 2010 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # Copyright 2015 Joyent, Inc. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Network services, Internet style # Look at http://www.iana.org/assignments/port-numbers for more # tcpmux 1/tcp echo 7/tcp echo 7/udp discard 9/tcp sink null discard 9/udp sink null systat 11/tcp users daytime 13/tcp daytime 13/udp netstat 15/tcp qotd 17/tcp # Quote of the Day chargen 19/tcp ttytst source chargen 19/udp ttytst source ftp-data 20/tcp ftp 21/tcp ftp 21/sctp ssh 22/tcp # Secure Shell ssh 22/sctp telnet 23/tcp smtp 25/tcp mail time 37/tcp timserver time 37/udp timserver rlp 39/tcp # Resource Location Protocol rlp 39/udp # Resource Location Protocol name 42/udp nameserver whois 43/tcp nicname # usually to sri-nic tacacs 49/tcp tacacs 49/udp domain 53/udp domain 53/tcp tacacs-ds 65/tcp tacacs-ds 65/udp bootps 67/udp # BOOTP/DHCP server bootpc 68/udp # BOOTP/DHCP client http 80/tcp www www-http http 80/udp www www-http http 80/sctp kerberos 88/udp kdc # Kerberos V5 KDC kerberos 88/tcp kdc # Kerberos V5 KDC hostnames 101/tcp hostname # usually to sri-nic pop2 109/tcp pop-2 # Post Office Protocol - V2 pop3 110/tcp # Post Office Protocol - Version 3 sunrpc 111/udp rpcbind sunrpc 111/tcp rpcbind sftp 115/tcp imap 143/tcp imap2 # Internet Mail Access Protocol v2 bgp 179/tcp # Border Gateway Protocol bgp 179/udp bgp 179/sctp irc 194/tcp irc 194/udp smux 199/tcp smux 199/udp imap3 220/tcp imap3 220/udp clearcase 371/tcp clearcase 371/udp ldap 389/tcp # Lightweight Directory Access Protocol ldap 389/udp # Lightweight Directory Access Protocol https 443/tcp https 443/udp https 443/sctp kpasswd 464/tcp kpasswd 464/udp dhcpv6-client 546/udp dhcpv6c # DHCPv6 Client (RFC 3315) dhcpv6-client 546/tcp dhcpv6-server 547/udp dhcpv6s # DHCPv6 Server (RFC 3315) dhcpv6-server 547/tcp rtsp 554/tcp rtsp 554/udp nntps 563/tcp snntp nntps 563/udp snntp submission 587/tcp # Mail Message Submission submission 587/udp # see RFC 2476 ipp 631/tcp ipp 631/udp ldaps 636/tcp # LDAP protocol over TLS/SSL (was sldap) ldaps 636/udp # LDAP protocol over TLS/SSL (was sldap) silc 706/tcp silc 706/udp iscsi 860/tcp iscsi 860/udp rsync 873/tcp rsync 873/udp ftps-data 989/tcp ftps-data 989/udp ftps 990/tcp ftps 990/udp imaps 993/tcp imaps 993/udp pop3s 995/tcp pop3s 995/udp socks 1080/tcp socks 1080/udp openvpn 1194/tcp openvpn 1194/udp icap 1344/tcp # Internet Content Adaptation Protocol wins 1512/tcp wins 1512/udp radius 1812/tcp radius 1812/udp radius-acct 1813/tcp radius-acct 1813/udp cvspserver 2401/tcp icpv2 3130/tcp icpv2 3130/udp iscsi-target 3260/tcp iscsi-target 3260/udp mysql 3306/tcp mysql 3306/udp nut 3493/tcp # Network UPS Tools svn 3690/tcp svn 3690/udp epmd 4369/tcp # Erlang Port Mapper Daemon epmd 4369/udp sip 5060/tcp sip 5060/udp sip-tls 5061/tcp sip-tls 5061/udp xmpp-client 5222/tcp xmpp-server 5269/tcp postgresql 5432/tcp postgres postgresql 5432/udp postgres http-alt 8080/tcp webcache # HTTP Alternate, webcache http-alt 8080/udp memcache 11211/tcp memcache 11211/udp # # Host specific functions # tftp 69/udp rje 77/tcp finger 79/tcp link 87/tcp ttylink supdup 95/tcp iso-tsap 102/tcp x400 103/tcp # ISO Mail x400-snd 104/tcp csnet-ns 105/tcp uucp-path 117/tcp nntp 119/tcp usenet # Network News Transfer ntp 123/tcp # Network Time Protocol ntp 123/udp # Network Time Protocol netbios-ns 137/tcp # NETBIOS Name Service netbios-ns 137/udp # NETBIOS Name Service netbios-dgm 138/tcp # NETBIOS Datagram Service netbios-dgm 138/udp # NETBIOS Datagram Service netbios-ssn 139/tcp # NETBIOS Session Service netbios-ssn 139/udp # NETBIOS Session Service NeWS 144/tcp news # Window System snmpd 161/udp snmp # Net-SNMP snmp daemon slp 427/tcp slp # Service Location Protocol, V2 slp 427/udp slp # Service Location Protocol, V2 mobile-ip 434/udp mobile-ip # Mobile-IP cvc_hostd 442/tcp # Network Console microsoft-ds 445/tcp # Microsoft Directory Services microsoft-ds 445/udp # Microsoft Directory Services ike 500/udp ike # Internet Key Exchange uuidgen 697/tcp # UUID Generator uuidgen 697/udp # UUID Generator # # UNIX specific services # # these are NOT officially assigned # rdc 121/tcp # SNDR server daemon exec 512/tcp login 513/tcp shell 514/tcp cmd # no passwords used printer 515/tcp spooler # line printer spooler courier 530/tcp rpc # experimental uucp 540/tcp uucpd # uucp daemon biff 512/udp comsat who 513/udp whod syslog 514/udp talk 517/udp route 520/udp router routed ripng 521/udp klogin 543/tcp # Kerberos authenticated rlogin kshell 544/tcp cmd # Kerberos authenticated remote shell new-rwho 550/udp new-who # experimental rmonitor 560/udp rmonitord # experimental monitor 561/udp # experimental pcserver 600/tcp # ECD Integrated PC board srvr sun-dr 665/tcp # Remote Dynamic Reconfiguration kerberos-adm 749/tcp # Kerberos V5 Administration kerberos-adm 749/udp # Kerberos V5 Administration kerberos-iv 750/udp # Kerberos V4 key server krb5_prop 754/tcp # Kerberos V5 KDC propogation swat 901/tcp # Samba Web Adm.Tool ufsd 1008/tcp ufsd # UFS-aware server ufsd 1008/udp ufsd cvc 1495/tcp # Network Console ingreslock 1524/tcp www-ldap-gw 1760/tcp # HTTP to LDAP gateway www-ldap-gw 1760/udp # HTTP to LDAP gateway listen 2766/tcp # System V listener port nfsd 2049/udp nfs # NFS server daemon (clts) nfsd 2049/tcp nfs # NFS server daemon (cots) nfsd 2049/sctp nfs eklogin 2105/tcp # Kerberos encrypted rlogin lockd 4045/udp # NFS lock daemon/manager lockd 4045/tcp ipsec-nat-t 4500/udp # IPsec NAT-Traversal vxlan 4789/udp # Virtual eXtensible Local Area Network (VXLAN) mdns 5353/udp # Multicast DNS mdns 5353/tcp vnc-server 5900/tcp # VNC Server dtspc 6112/tcp # CDE subprocess control servicetag 6481/udp servicetag 6481/tcp fs 7100/tcp # Font server solaris-audit 16162/tcp # Secure remote audit logging wnn6 22273/tcp # Wnn6 jserver wnn6 22273/udp # Wnn6 jserver # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. # Copyright 2022 Garrett D'Amore # # cmd/cmd-inet/etc/sock2path.d/Makefile # SOCK2PATHFILES= \ driver%2Fnetwork%2Fbpf \ driver%2Fnetwork%2Frds \ driver%2Fnetwork%2Frdsv3 \ driver%2Fnetwork%2Fsdp \ system%2Fkernel include ../../../Makefile.cmd ETCSOCK2PATHDIR= $(ROOTETC)/sock2path.d ETCSOCK2PATHFILES= $(SOCK2PATHFILES:%=$(ETCSOCK2PATHDIR)/%) FILEMODE= 0644 .KEEP_STATE: all: install: $(ETCSOCK2PATHDIR) $(ETCSOCK2PATHFILES) $(ETCSOCK2PATHDIR)/%: % $(INS.file) $(ETCSOCK2PATHDIR): $(INS.dir) # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved. # # socket configuration information # # Family Type Protocol Dev|Module 32 1 0 sockpfp 32 4 0 sockpfp # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved. # # socket configuration information # # Family Type Protocol Dev|Module 30 1 0 /dev/rds # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved. # # socket configuration information # # Family Type Protocol Dev|Module 30 6 0 sockrds # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved. # # socket configuration information # # Family Type Protocol Dev|Module 2 2 257 socksdp 26 2 257 socksdp # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # Copyright (c) 1995, 2010, Oracle and/or its affiliates. All rights reserved. # # socket configuration information # # Family Type Protocol Dev|Module 2 2 0 tcp 2 2 6 tcp 26 2 0 tcp 26 2 6 tcp 2 1 0 udp 2 1 17 udp 26 1 0 udp 26 1 17 udp 1 2 0 /dev/ticotsord 1 6 0 /dev/ticotsord 1 1 0 /dev/ticlts 2 4 0 icmp 26 4 0 icmp 2 2 132 socksctp 26 2 132 socksctp 2 6 132 socksctp 26 6 132 socksctp 24 4 0 rts 27 4 2 /dev/keysock 29 4 1 /dev/spdsock 31 1 0 trill