Right now, a very important chunk of security information can by summed up by going to my firewall building page. You should read it, even if you are not planning to set up a "firewall".
Other good things:
'aset' is in package "SUNWast".
However, these days, sun is recommending the "JASS" security toolkit, which is at http://www.sun.com/security/jass
JASS is used to "minimize, harden, and secure Solaris"[ and technically starts for "Jumpstart Architecture and Security Scripts"]
ndd -set /dev/ip ip_forwarding 0 ndd -set /dev/ip ip_strict_dst_multihoming 1 ndd -set /dev/ip ip_forward_src_routed 0 ndd -set /dev/ip ip_forward_directed_broadcasts 0 (and the same for ip6_xxxx, if on solaris 8)There are additional settings you might consider adding, in tihs third-party page on "Tuning solaris for checkpoint"