Re: pfil locks up X on Solaris 9

Dan D Niles <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <5336_1229964808_494FC607_5336_1416_1_1229964669.26366.3.camel@jane.spg.more.net>
On Mon, 2008-12-22 at 12:12 +1100, Darren Reed wrote:
> Dan D Niles wrote:
> >
> >
> > Darren Reed wrote:
> >> Dan D Niles wrote:
> >>> I have a fresh install of Solaris 9, fully patched.  When I install
> >>> pfil
> >>> (2.1.13) and reboot, my desktop doesn't work correctly.  When I start a
> >>> terminal it opens the window but I never get the shell prompt. When I
> >>> exit CDE, I get a white screen and it just hangs.  I can still log in
> >>> via ssh and the system seems mostly normal.  I cannot reboot the
> >>> machine
> >>> however, so something is still wrong with the machine.
> >>>   
> >>
> >> Why can't you reboot it?
> >> What happens if you try?
> >
> > It acts like it is going to shutdown, but doesn't.  The display goes
> > white, but no messages ever appear and it never shuts down or reboots.
> > When pfil is not installed, the screen goes white, it says stopping
> > print services, followed by other messages then reboots, as it should.
> 
> If you can break to the console and force a crash dump with sync,
> when it is trying to shutdown, that might help me see what's wrong.

I have a crash dump, it is about 60 MiB.  Should I send it to the list,
or somewhere else?
  
> 
> >> If you can ssh in, can you do "ndd /dev/pfil qif_status"?
> >
> > After I've issued a shutdown command or just any time with pfil loaded?
> 
> When you've tried to login with CDE but get frozen and can then
> only ssh in.

# ndd /dev/pfil qif_status
ifname ill q OTHERQ ipmp num sap hl nr nw bad copy copyfail drop notip
nodata notdata
QIF1 0x0 0x300010c5498 0x300010c5588 0x0 1 806 0 319 10 0 0 0 0 0 0 0
eri0 0x30000060cb0 0x300010c5c48 0x300010c5d38 0x0 0 800 14 118 57 0 0 0
0 0 0 0

Thanks,

Dan
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.