solaris 9 with CDE and IPF

aetengoku · 01-09-2004, 12:11 PM

I am running Solaris 9 nd trying to get ip filter (IPF) to run.

the only rule i have is "block in all"

Does anyone have any idea why i cant log into CDE without it
giving a DTlogin error message.

Thanks for any help

stickman · 01-09-2004, 04:02 PM

This is probably because dtlogin can connect to the necessary X processes. Try adding rules to allow access to/from localhost as a start.

aetengoku · 01-14-2004, 10:45 AM

oki still cant get it to work. OK more details.I try to log in and get a dt login error. So I get returned to the login screen. When i log in again i dont get the error message.

here is what is in the rules

pass in quick on lo0 all
pass out quick on lo0 all
#xxx.xxx.xxx.xxx being eri0 ip address
pass in quick on lo0 from xxx.xxx.xxx.xxx/32 to xxx.xxx.xxx.xxx/32
block in all

I havent found anything about running CDE and ipfilter.
Any help would be appreciated

aetengoku · 01-14-2004, 10:48 AM

ooopps
should be

pass in quick on eri0 from xxx.xxx.xxx.xxx/32 to xxx.xxx.xxx.xxx/32
pass out quick on eri0 from xxx.xxx.xxx.xxx/32 to xxx.xxx.xxx.xxx/32
block in all

stickman · 01-15-2004, 10:07 AM

Try logging all blocked packets for a few minutes while you make an attempt to login. Also are there any messages in /var/log/syslog?