I currently have quite a few Solaris machines and recently used a workaround for the xdmcpd vulnerability which entails essentially editing the /usr/dt/config/Xconfig file and uncommenting the dt.REquestport : 0 line (so that the dtlogin runs locally but not on the network at all). After a few days I have every machine that runs ipfilter 4.1.3 and pfil 2.1.4 crashed (Solaris 8 and 9 both). Any machine not firewalled is fiune with the edit and I believe it has something to do with (excuse my laymen terms here) something requesting a port 0 and ipfilter not liking it. I finally got an error today from a Solaris box that said:
Kbdqueueevent: can't allocate block for event The machine was totally hung and needed powered off to recover and of course the Xconfig file changed back to default. Is this an ipfilter error? A pfil error? Any ideas? Thanks in advance, any info would be helpful as I am baffled. -- Brian Macdonald, B-DO MS M888 SM-30 Bikini Atoll Rd Los Alamos National Laboratory Los Alamos, NM 87545 Office : 505-665-3587 --
