Very Computer

My firewall (running on a Solaris box) require a static IP address.
I have pleaded with my ISP for them to assign me a static IP address,
even for
an additional cost; they refused.

I configured the current leased address on the hme0 interface, with the
default
router, etc, that my ISP DHCP server leased to me; however, I still
can't
get on to the network.

Does any out there know what I need to do to allow my Solaris 2.6 box to

use the leased address my ISP DHCP server assigned. The firewall running

on the my Solaris box, need to have a static IP address, so I don't want
to
configure the box as a DHCP client.

Thanks in advance.

-Carlton

I already got a firewall (Gauntlet).
What I want to know is how can I hard code the address on a Solaris
box?

Thanks,

-Carlton

Quote:>I already got a firewall (Gauntlet).
>What I want to know is how can I hard code the address on a Solaris
>box?

It seems like you are in denial about the fact that your ISP won't give
you a static IP.  Solaris tricks to ignore the DHCP stuff aren't going
to change the situation.

  - Logan
--
my  your   his  her   our   their   _its_
I'm you're he's she's we're they're _it's_

You are just going to have to change your firewall software or get
another ISP.  IPFilter allows you to reference your IP address with the
NIC name.  It also provides NAT so that you can use your Solaris system
as a router for a LAN, again referencing the dynamic IP address to a NIC
name.

What type of internet connection do you have?  Cable? DSL? I know atleast
with Cisco UBR's your ISP can make you use a DHCP address.  If you don't you
will not be able to surf.  What they do is the CNR (Cisco Network Registrar)
assigns you an address.  The UBR knows what address you are assigned.  If
your packets aren't tagged with the address you are assigned then you will
not be able to surf.

I'm sure DSL has the same thing.  This is just a way that ISP are forcing
you to use DHCP.  This is a good thing for the other customers.  If you
statically assign yourself an IP address and the DHCP server (CNR) isn't
configured properly it will still hand that IP to someone else...and then
you and the other customer will both have IP conflicts.

This is something that will get you banned from your ISP very easily.

As is their perogative...

Quote:> I configured the current leased address on the hme0 interface, with the
> default router, etc, that my ISP DHCP server leased to me; however, I still
> can't get on to the network.

Road Runner here in Rochester uses DHCP as a crude authentication mechanism.
If you don't get your IP address via DHCP, they won't let you connect. Maybe
your ISP operates similarly.

Quote:> Does any out there know what I need to do to allow my Solaris 2.6 box to
> use the leased address my ISP DHCP server assigned. The firewall running
> on the my Solaris box, need to have a static IP address, so I don't want
> to configure the box as a DHCP client.

I'm afraid everyone else is correct. You've got to play by the ISP's rules if
you want to play at all.

Now, the question here is why does, or why do you think, the firewall software
require(s) a static IP address? Is it hard-coded in a configuration file
somewhere? Well, that's easy enough to get around. Simply delay the start-up
of the firewall software until after the DHCP configuration is complete, and
write a shell script that gleans the IP from "ifconfig" output, puts it into
the configuration file, then starts up the firewall software.n

If you use IPFilter as your firewall, you simply do not have to have and IP
address referenced.  Here is a part of the ipf.rules from my OpenBSD
firewall box.  It's a 486DX2 with 16MB of RAM and I'm not even going to try
to run Solaris on it :-)

#  Keep loopback free.
pass in quick on lo0
pass out quick on lo0
#
#  Block short IP fragments that ipfilter can't analyze header information.
block in log quick on dc0 proto tcp/udp all with short
#
#  Block source routed packets - from OBSD faq6
block in quick on dc0 all with opt lsrr
block in quick on dc0 all with opt ssrr
#
#  Shitcan IP spoofers.
block in quick on dc0 from 192.168.0.0/16 to any
block in quick on dc0 from 172.16.0.0/12 to any
block in quick on dc0 from 10.0.0.0/8 to any
block in quick on dc0 from 127.0.0.0/8 to any
#

dc0 is the dnet type of NIC attached to the cable modem and IPFilter
translates its name to its IP address.  Similarly the NAT function is dealt
with without reference to any particular IP address:

map dc0 192.168.0.0/24 -> dc0/32 proxy port ftp ftp/tcp
map dc0 192.168.0.0/24 -> dc0/32 portmap tcp/udp 10000:20000
map dc0 192.168.0.0/24 -> dc0/32

My internal network is 192.168.0.0 and the external IP address is whatever
is assigned to dc0.