From owner-freebsd-net@FreeBSD.ORG  Fri Dec 12 09:47:16 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 327FA16A4CE; Fri, 12 Dec 2003 09:47:16 -0800 (PST)
Received: from lariat.org (lariat.org [63.229.157.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 9E1BF43D2D; Fri, 12 Dec 2003 09:47:14 -0800 (PST)
	(envelope-from brett@lariat.org)
Received: from runaround.lariat.org (IDENT:ppp1000.lariat.org@lariat.org
	[63.229.157.2])	by lariat.org (8.9.3/8.9.3) with ESMTP id KAA18006;
	Fri, 12 Dec 2003 10:47:12 -0700 (MST)
X-message-flag: Warning! Use of Microsoft Outlook renders your system
	susceptible to Internet worms.
Message-Id: <6.0.0.22.2.20031212104401.0460eae8@localhost>
X-Sender: brett@localhost (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Date: Fri, 12 Dec 2003 10:47:07 -0700
To: "Jacques A. Vidrine" <nectar@FreeBSD.org>
From: Brett Glass <brett@lariat.org>
In-Reply-To: <20031212132628.GB19204@madman.celabo.org>
References: <200312120312.UAA10720@lariat.org>
 <20031212132628.GB19204@madman.celabo.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
cc: net@FreeBSD.org
Subject: Re: Controlling ports used by natd
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Dec 2003 17:47:16 -0000

At 06:26 AM 12/12/2003, Jacques A. Vidrine wrote:

>I suppose there is brute force.  Use an application like PortSentry to
>bind the ports that you don't want to be used by natd.

Or, for that matter, a do-nothing application that just binds them but
throws away data (in the case of UDP) or rejects connections (in the
case of TCP). That's certainly one approach, though it is brute force.

--Brett