You are attempting to filter all UDP network traffic between two Solaris zones on the same machine.

Zone 1 is using the IP address 192.168.84.1 on the interface ce0:1 Zone 2 is using the IP address 192.168.84.2 on the interface ce0:2

The Solaris IP Filter rules are in effect :

block in quick proto udp from 192.168.84.1 to 192.168.84.2 block in quick proto udp from 192.168.84.2 to 192.168.84.1

With these rules in effect, UDP traffic still passes between the two zones. Why is this traffic NOT being blocked?

A.
At least one pass in rule is required.

B.
Solaris IP Filter does NOT support CE interfaces.

C.
Solaris IP Filter can NOT be used to filter UDP traffic.

D.
Solaris IP Filter can NOT filter traffic between zones on the same machine.