From owner-freebsd-security@FreeBSD.ORG  Sat May 27 21:24:20 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AB88616CC23
	for <freebsd-security@freebsd.org>;
	Sat, 27 May 2006 21:22:10 +0000 (UTC)
	(envelope-from patpro@patpro.net)
Received: from smtp6-g19.free.fr (smtp6-g19.free.fr [212.27.42.36])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5542143D55
	for <freebsd-security@freebsd.org>;
	Sat, 27 May 2006 21:22:10 +0000 (GMT)
	(envelope-from patpro@patpro.net)
Received: from [82.235.12.223] (boleskine.patpro.net [82.235.12.223])
	by smtp6-g19.free.fr (Postfix) with ESMTP id CD4982252D;
	Sat, 27 May 2006 23:22:08 +0200 (CEST)
In-Reply-To: <4478594C.6080309@iang.org>
References: <4478594C.6080309@iang.org>
Mime-Version: 1.0 (Apple Message framework v750)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <458F3682-0DBB-4AC0-A300-C7C38756165A@patpro.net>
Content-Transfer-Encoding: 7bit
From: Patrick Proniewski <patpro@patpro.net>
Date: Sat, 27 May 2006 23:22:07 +0200
To: Ian G <iang@iang.org>
X-Mailer: Apple Mail (2.750)
Cc: FreeBSD Security List <freebsd-security@freebsd.org>
Subject: Re: On what versions of FreeBSD can we unreserve ports?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 27 May 2006 21:24:21 -0000

On 27 mai 2006, at 15:51, Ian G wrote:

> On which versions of FreeBSD is it now possible to
> un-reserve ports?

> host$ sysctl net.inet.ip.portrange.reservedhigh=0


According to freebsd web site, it has first came with 5.1R (http:// 
www.freebsd.org/releases/5.1R/relnotes-i386.html). By the way, you  
might want to take a look to MAC implementation, and especially:
http://www.freebsd.org/cgi/man.cgi?query=mac_portacl&sektion=4
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac.html

patpro