Personally I have yet to have a problem running IPF on SGI machines which include
Origins, O2's, or Indy's, this may not be a solution, however it may be your best bet,
try going to www.opensourcefirewall.com and download TREX which is an OpenSource fw
slightly better (IMHO) than ipfilterd.
What could be happenning is your not allowing all in from localhost on all ports which
may be some funky ipfilterd bug or so. Try passing in on everything localnet ports 1
>< 65535 and if that doesn't work then hop over to that site. Wish I could give you a
more definitive answer at this point but I havent touched an Irix box in about 6-9
months.
------Original Message------
From: Nicholas M Glykos <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: November 11, 2000 11:32:26 AM GMT
Subject: ipfilterd start-up problem on Irix 6.4
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear All,
I have been trying to use ipfilterd on a Silicon Graphics Origin 200,
Irix 6.4 machine. No matter how permissive the rules are, once I start the
deamon (with '/usr/etc/ipfilterd -d') all incoming packets are blocked. I
suspect the reason for this behaviour is that the loopback gets blocked
(because even commands like 'ps -elf' (issued from the console) do not
respond). I have tried an exhaustive combination of loopback (un)filtering
rules like :
accept -i lo0
accept -i lo0 1
accept ip.dst localhost or ip.src localhost
accept between localhost localhost
accept ip.src localhost or ip.dst localhost
,but to no avail. Even with only two rules :
accept -i lo0
accept -i ef0
the machine still hangs. Once the machines gets to this state, I can't
even 'reboot' or 'shutdown', so I have to hit the hardware reset button.
I'm definitely missing something here, but after 6 or 7 hardware reboots,
any piece of advice would be greatly appreciated.
Thanks,
Nicholas
Dr Nicholas M. Glykos, Crystallography Group
IMBB, FORTH, PO Box 1527, 71110 Heraklion, Crete
GREECE, Tel ++30-(0)81-394429, Fax ++30-(0)81-394351
www: http://origin.imbb.forth.gr:8888/~glykos/
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv
iQA/AwUBOg0SNNTF6ZtuKDTHEQK+/QCfcSj5LHq/z0yhQPIYnoPGvBHe+EoAoMY8
qldTFOgZVoXayIhNN8zcbKdb
=j4f9
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
______________________________________________
FREE Personalized Email at Mail.com
Sign up at http://www.mail.com/?sr=signup
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
