Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 09 Nov 2016 19:30:33 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 214366] dns/openmdns: don't use hardcoded interface
Message-ID:  <bug-214366-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D214366

            Bug ID: 214366
           Summary: dns/openmdns: don't use hardcoded interface
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: jbeich@FreeBSD.org
          Reporter: dch@skunkwerks.at
          Assignee: jbeich@FreeBSD.org
             Flags: maintainer-feedback?(jbeich@FreeBSD.org)

Created attachment 176824
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D176824&action=
=3Dedit
v1 patch

# issue

hardcodes em0 as the interface and provides no knob to swap this.

https://svnweb.freebsd.org/ports/head/dns/openmdns/files/mdnsd.in?view=3Dma=
rkup#l16

# fix

- add a knob
- set lo0 as a risk-free default

I couldn't think of a better option, considering
http://securityaffairs.co/wordpress/35607/hacking/mdns-amplify-ddos-attack.=
html
although I have no idea if openmdns is at risk here.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-214366-13>