IPFilter on Solaris

salamond <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <17939_1244036777_4A267EA8_17939_9838_1_5585f2610906030643s3e0e181al57b01ccdcdb1a8f1@mail.gmail.com>
Hi, all.

I encountered such a problem.
Platform: SunOS  5.8 sparc SUNW,Sun-Fire-V210

While I replaced IPFilter 3.4.32 with a new  3.4.35, NIS doesn't work.
$id # or
$id <some_uid> hangs.

which cause ssh or some other app using NIS/NIS+ all hangs.

I tried with nisping to show all NIS servers and just proved that
they're all in allowed list.
both directions: in and out.

Then I started manipulating all rules, changing sequences, cut numbers.
But each time I update rules in file, remove all rules with
$ ipf -F a
and start with new rules in file
$ ipf -f myrules
For the first half an hour, everything works fine even including NIS.

Half an hour later, everything works except for NIS.
$ id # starts to hang again.

I even tried # pass out from any to any
# pass in from any to any

It just doesn't last longer than half an hour.

I tried google, but no output really helps.
some archives seems to have some description about the similar
problem, but I couldn't find an answer.

Any one familiar with this?
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.