ip filter packet flow question

[Nikolaus Filus <nfilus@gmx.net>]

Hi,

I'm reading about the ipf structure and found some issues not well documented,
which I hop can be explained here on the list.

1. I found differences between Solaris IP Filter and OpenSource IP Filter, as in
the first one, there is "Packet state check" and "State table check". What is
the difference between them and is this really a difference between both
systems? [1][2]

2. At what point are the auth and pre-auth rules processed? They are noted in
the texts, but not on the pictures. Is this processed for the very first packet?


References:
[1] http://coombs.anu.edu.au/~avalon/ipfil-flow.html
[2] http://docs.sun.com/app/docs/doc/816-4554/6maoq023u?a=view



Thank you in advance.


Nikolaus Filus