Re: em0 hijacking traffic to port 623

From: Danny Braniss <danny_at_cs.huji.ac.il>
Date: Wed, 23 May 2007 10:21:17 +0300
> On 5/22/07, Dag-Erling Smørgrav <des_at_des.no> wrote:
> > Ian FREISLICH <ianf_at_clue.co.za> writes:
> > > No, it's a March 6 current.  How safe is it to just update the
> > > sys/dev/em directory and recompile?  Quite a lot has changed in
> > > CURRENT since then and I don't want to update everything on these
> > > servers just yet.
> >
> > Quick workaround: configure inetd to listen to port 623 so rpcbind
> > won't assign these ports to the NFS server.  Something like this:
> >
> > asf-rmcp dgram  udp     nowait  root    /bin/false              false
> > asf-rmcp stream tcp     nowait  root    /bin/false              false
> > You dont have to do anything this crude btw, there is an setting
> in rc.conf I believe to control the range, I'm rusty on the details
> right now, I discovered this while working this same issue with
> Yahoo, but its been 6 months or more since.
> 

before coffee,
> in loader.conf:
s/loader.conf/sysctl.conf/
> net.inet.ip.portrange.lowlast="665"
Received on Wed May 23 2007 - 05:21:18 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:10 UTC