IP FILTER blocks USB keyboard

Hi,

for the second time, in a different machine, i observe IP FILTER blocking

the keyboard. I have a Solaris 9 on a SunBlade 100 with USB keyboard

and IPFILTER 4.1.22 with pfil 2.1.12. I load the IPF rules and keep on

working normally. On the next day the machine has a normal network

behaviour and the mouse answers, but the USB keyboard is blocked and

i have to reboot to bring to normal behaviour, despite the same IPF rules

are loaded at boot time. Thus it happens with time (?)

The IPF rules are listed below. Should make a rule for the keyboard?

pass out quick on eri0 proto tcp from any to $dns port = domain flags S/FSRPAU keep state

pass out quick on eri0 proto udp from any to $dns port = domain keep state

pass out quick on eri0 proto tcp from $myip to any port = 80 flags S/FSRPAU keep state

pass out quick on eri0 proto tcp from $myip to any port = 443 flags S/FSRPAU keep state

pass out quick on lo0 all

pass out quick on hme0 all

pass out quick on eri0 proto tcp from any to any port = time flags S/FSRPAU keep state

pass out quick on eri0 proto tcp from any to any port = ftp flags S/FSRPAU keep state

block out log first quick on eri0 all

pass in quick on lo0 all

pass in quick on hme0 all

pass in quick on eri0 proto tcp from any to $myip port = ssh flags S/FSRPAU keep state

pass in quick on eri0 proto icmp from $friend to $myip icmp-type echo keep state

block in log first quick on eri0 all

null

[1566 byte] By [tunelera] at [2007-11-27 6:19:02]
# 1
Hello.I do not think that it is possible to let the IP filter block or not block the keyboard.I think there is any problem (bug) either with the IP filter or a bug not related to the IP filter (perhaps the IP filter software influences another software badly).Martin
Martin_Rosenaua at 2007-7-12 17:33:20 > top of Java-index,General,Network Configurations...
# 2

wow, i did not find any lock for this block. But it just happens with IP filter

on, even with pass all rules, when i leave the computer a few hours alone.

I already tested, and if i `ipf -D` (disable) it does not happen.

It is also the second machine (different hardware runing solaris 9) in which

if observe it. I am sure IPF does that, but there is no mesg log.

I'll try harder with ipf logs ...

tunelera at 2007-7-12 17:33:20 > top of Java-index,General,Network Configurations...
# 3
Can someone at least give me a tip, how to test the connection to the USB keyboard,or how to check all devices blocked by IPFILTER. How to see by the way theblock history of IPFILTER?
tunelera at 2007-7-12 17:33:20 > top of Java-index,General,Network Configurations...