Date: Mon, 16 Oct 2000 19:34:08 -0700 (PDT) From: Doug Barton <DougB@gorean.org> To: Guolin Cheng <chenggl@yahoo.com> Cc: Matt Heckaman <matt@ARPA.MAIL.NET>, freebsd-security@freebsd.org Subject: Re: Reserved ports too limited for amd (automount) on FreeBSD 4.1 Message-ID: <Pine.BSF.4.21.0010161918470.9924-100000@dt051n37.san.rr.com> In-Reply-To: <20001017012808.5214.qmail@web106.yahoomail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 16 Oct 2000, Guolin Cheng wrote:
> Matt Heckaman,
>
> Thanks.
>
> I changed using sysctl command after FreeBSD 4.1 reboot, the problem is: even
> the parameter is changed ( sysctl -w net.inet.ip.portrange.lowfirst=2023 ), the
> amd still using ports <1024, since the reserved ports already was in use from
> 1023! and now they will be used one by one sequentially!!! :((
Your problem is that by definition the secure port range ends at
1023. You _may_ be able to get what you want by changing IPPORT_RESERVED
in /usr/src/sys/netinet/in.h and rebuilding your world and kernel, but
it'd be a hack of potentially dangerous proportions.
Doug
--
"The dead cannot be seduced."
- Kai, "Lexx"
Do YOU Yahoo!?
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0010161918470.9924-100000>