From owner-freebsd-net@FreeBSD.ORG  Fri May  7 20:45:19 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D448316A4CE; Fri,  7 May 2004 20:45:19 -0700 (PDT)
Received: from grosbein.pp.ru (grgw.svzserv.kemerovo.su [213.184.64.130])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 2C97043D53; Fri,  7 May 2004 20:45:18 -0700 (PDT)
	(envelope-from eugen@grosbein.pp.ru)
Received: from grosbein.pp.ru (eugen@localhost [127.0.0.1])
	by grosbein.pp.ru (8.12.11/8.12.11) with ESMTP id i483jFi4000983;
	Sat, 8 May 2004 11:45:15 +0800 (KRAST)
	(envelope-from eugen@grosbein.pp.ru)
Received: (from eugen@localhost)
	by grosbein.pp.ru (8.12.11/8.12.11/Submit) id i483jF0P000982;
	Sat, 8 May 2004 11:45:15 +0800 (KRAST)
	(envelope-from eugen)
Date: Sat, 8 May 2004 11:45:14 +0800
From: Eugene Grosbein <eugen@grosbein.pp.ru>
To: net@freebsd.org, arch@freebsd.org
Message-ID: <20040508034514.GA937@grosbein.pp.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
cc: yar@freebsd.org
Subject: Re: bin/65928: [PATCH] stock ftpd uses superuser credentials for
	active mode sockets
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 08 May 2004 03:45:20 -0000

Hi!

When an active IPv4 TCP connection between
localIP:localport and remoteIP1:remoteport1 exists,
it is not possible for local non-root user to create outgoing
TCP connection from localIP:localport to remoteIP2:remoteport2.

Why? It prevents http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/65928
from resolving.

Eugene Grosbein