From owner-freebsd-hackers@FreeBSD.ORG Thu Mar 29 06:33:01 2007 Return-Path: X-Original-To: freebsd-hackers@freebsd.org Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 630C916A404 for ; Thu, 29 Mar 2007 06:33:01 +0000 (UTC) (envelope-from doconnor@gsoft.com.au) Received: from cain.gsoft.com.au (cain.gsoft.com.au [203.31.81.10]) by mx1.freebsd.org (Postfix) with ESMTP id F27C913C465 for ; Thu, 29 Mar 2007 06:33:00 +0000 (UTC) (envelope-from doconnor@gsoft.com.au) Received: from inchoate.gsoft.com.au ([203.31.81.61]) (authenticated bits=0) by cain.gsoft.com.au (8.13.8/8.13.8) with ESMTP id l2T6WuMu094115 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 29 Mar 2007 16:02:56 +0930 (CST) (envelope-from doconnor@gsoft.com.au) From: "Daniel O'Connor" To: Steve Watt Date: Thu, 29 Mar 2007 16:02:53 +0930 User-Agent: KMail/1.9.5 References: <200703280124.l2S1OFI5028861@wattres.watt.com> In-Reply-To: <200703280124.l2S1OFI5028861@wattres.watt.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart6090580.xP8Uv5RAEz"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200703291602.54203.doconnor@gsoft.com.au> X-Spam-Score: -3.977 () ALL_TRUSTED,BAYES_00 X-Scanned-By: MIMEDefang 2.58 on 203.31.81.10 Cc: freebsd-hackers@freebsd.org Subject: Re: sendto() giving EPERM outside a jail X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Mar 2007 06:33:01 -0000 --nextPart6090580.xP8Uv5RAEz Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Wednesday 28 March 2007 10:54, Steve Watt wrote: > } I guess it would be nice if the man page(s) mentioned that a firewall > could } cause EPERM. I have seen it before with other apps but the sendto= () > confused } me. > > It's one of those unpleasant interactions between pluggable subsystems, > so it's a bit tough to document -- there are various different firewalls > available, after all. True, but it doesn't matter which firewall you're using, the result is the= =20 same :) > } It doesn't say anything about EPERM. > > If you're sending broadcast broadcast or multicast datagrams, you need > to set the SO_BROADCAST socket option, as well. Ahh, understood. Still, it seems to work without that - the sendto() call works fine now I h= ave=20 explicitly allowed multicast. =2D-=20 Daniel O'Connor software and network engineer for Genesis Software - http://www.gsoft.com.au "The nice thing about standards is that there are so many of them to choose from." -- Andrew Tanenbaum GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C --nextPart6090580.xP8Uv5RAEz Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (FreeBSD) iD8DBQBGC12W5ZPcIHs/zowRAtM4AJ9s4yo17PLj2zLM1ofKVZ51qvXRtACgqJww lFSyVQQgJSfpoPb8NRuaNM0= =fS8A -----END PGP SIGNATURE----- --nextPart6090580.xP8Uv5RAEz--