Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Dec 2015 08:37:19 -0500 (EST)
From:      Rick Macklem <rmacklem@uoguelph.ca>
To:        freebsd-current <freebsd-current@freebsd.org>
Subject:   RPC request sent to 127.0.0.1 becomes from other IP on machine
Message-ID:  <521574245.126601980.1449754639530.JavaMail.zimbra@uoguelph.ca>
In-Reply-To: <1544725253.126601939.1449754636170.JavaMail.zimbra@uoguelph.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
------=_Part_126601978_687480826.1449754639528
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Hi,

Mark has reported a problem via email where the nfsuserd daemon sees
requests coming from an IP# assigned to the machine instead of 127.0.0.1.
Here's a snippet from his message:
  Ok, I have Plex in a jail and when I scan the remote NFS file share the
  *local* server's nfsuserd spams the logs.
Spamming the logs refers to the messages nfsuserd generates when it gets
a request from an address other than 127.0.0.1.

I think the best solution is to switch nfsuserd over to using an AF_LOCAL
socket like the gssd uses, but that will take a little coding and probably
won't be MFCable.

I've sent him the attached patch to try as a workaround.

Does anyone happen to know under what circumstances the address 127.0.0.1
gets replaced?

And do you know if it will always be replaced with the same
address?
(I'm basically wondering if the workaround needs to be a list of IP addresses
 instead of a single address?)

Thanks in advance for any help with this, rick


------=_Part_126601978_687480826.1449754639528
Content-Type: text/x-patch; name=nfsuserd-fromip.patch
Content-Disposition: attachment; filename=nfsuserd-fromip.patch
Content-Transfer-Encoding: base64

LS0tIG5mc3VzZXJkLmMuc2F2CTIwMTUtMTItMDkgMTg6NDY6MjkuMjg0OTcyMDAwIC0wNTAwCisr
KyBuZnN1c2VyZC5jCTIwMTUtMTItMDkgMTg6NTk6MzMuNTY0NDk4MDAwIC0wNTAwCkBAIC00MCw2
ICs0MCwxMCBAQCBfX0ZCU0RJRCgiJEZyZWVCU0Q6IGhlYWQvdXNyLnNiaW4vbmZzdXNlCiAjaW5j
bHVkZSA8c3lzL3Zub2RlLmg+CiAjaW5jbHVkZSA8c3lzL3dhaXQuaD4KIAorI2luY2x1ZGUgPG5l
dGluZXQvaW4uaD4KKworI2luY2x1ZGUgPGFycGEvaW5ldC5oPgorCiAjaW5jbHVkZSA8bmZzL25m
c3N2Yy5oPgogCiAjaW5jbHVkZSA8cnBjL3JwYy5oPgpAQCAtOTQsNiArOTgsNyBAQCBnaWRfdCBk
ZWZhdWx0Z2lkID0gKGdpZF90KTMyNzY3OwogaW50IHZlcmJvc2UgPSAwLCBpbV9hX3NsYXZlID0g
MCwgbmZzdXNlcmRjbnQgPSAtMSwgZm9yY2VzdGFydCA9IDA7CiBpbnQgZGVmdXNlcnRpbWVvdXQg
PSBERUZVU0VSVElNRU9VVCwgbWFuYWdlX2dpZHMgPSAwOwogcGlkX3Qgc2xhdmVzW01BWE5GU1VT
RVJEXTsKK3N0cnVjdCBpbl9hZGRyIGZyb21pcDsKIAogaW50CiBtYWluKGludCBhcmdjLCBjaGFy
ICphcmd2W10pCkBAIC0xNDQsNiArMTQ5LDcgQEAgbWFpbihpbnQgYXJnYywgY2hhciAqYXJndltd
KQogCQkJfQogCQl9CiAJfQorCWZyb21pcC5zX2FkZHIgPSBpbmV0X2FkZHIoIjEyNy4wLjAuMSIp
OwogCW5pZC5uaWRfdXNlcm1heCA9IERFRlVTRVJNQVg7CiAJbmlkLm5pZF91c2VydGltZW91dCA9
IGRlZnVzZXJ0aW1lb3V0OwogCkBAIC0xOTAsNiArMTk2LDE1IEBAIG1haW4oaW50IGFyZ2MsIGNo
YXIgKmFyZ3ZbXSkKIAkJCQl1c2FnZSgpOwogCQkJfQogCQkJbmlkLm5pZF91c2VydGltZW91dCA9
IGRlZnVzZXJ0aW1lb3V0ID0gaSAqIDYwOworCQl9IGVsc2UgaWYgKCFzdHJjbXAoKmFyZ3YsICIt
ZnJvbWlwIikpIHsKKwkJCWlmIChhcmdjID09IDEpCisJCQkJdXNhZ2UoKTsKKwkJCWFyZ2MtLTsK
KwkJCWFyZ3YrKzsKKwkJCWlmIChpbmV0X2F0b24oKmFyZ3YsICZmcm9taXApID09IDApIHsKKwkJ
CQlmcHJpbnRmKHN0ZGVyciwgIkJhZCAtZnJvbWlwICVzXG4iLCAqYXJndik7CisJCQkJdXNhZ2Uo
KTsKKwkJCX0KIAkJfSBlbHNlIGlmIChuZnN1c2VyZGNudCA9PSAtMSkgewogCQkJbmZzdXNlcmRj
bnQgPSBhdG9pKCphcmd2KTsKIAkJCWlmIChuZnN1c2VyZGNudCA8IDEpCkBAIC00NTgsMjIgKzQ3
MywyMiBAQCBuZnN1c2VyZHNydihzdHJ1Y3Qgc3ZjX3JlcSAqcnFzdHAsIFNWQ1hQCiAJdV9zaG9y
dCBzcG9ydDsKIAlzdHJ1Y3QgaW5mbyBpbmZvOwogCXN0cnVjdCBuZnNkX2lkYXJncyBuaWQ7Ci0J
dV9pbnQzMl90IHNhZGRyOwogCWdpZF90IGdycHNbTkdST1VQU107CiAJaW50IG5ncm91cDsKIAog
CS8qCi0JICogT25seSBoYW5kbGUgcmVxdWVzdHMgZnJvbSAxMjcuMC4wLjEgb24gYSByZXNlcnZl
ZCBwb3J0IG51bWJlci4KKwkgKiBPbmx5IGhhbmRsZSByZXF1ZXN0cyBmcm9tIDEyNy4wLjAuMSBv
biBhIHJlc2VydmVkIHBvcnQgbnVtYmVyLAorCSAqIHVubGVzcyB0aGUgIi1mcm9taXAiIHNwZWNp
ZmllZCBhIGRpZmZlcmVudCBhZGRyZXNzLgogCSAqIChTaW5jZSBhIHJlc2VydmVkIHBvcnQgIyBh
dCBsb2NhbGhvc3QgaW1wbGllcyBhIGNsaWVudCB3aXRoCiAJICogIGxvY2FsIHJvb3QsIHRoZXJl
IHdvbid0IGJlIGEgc2VjdXJpdHkgYnJlYWNoLiBUaGlzIGlzIGFib3V0CiAJICogIHRoZSBvbmx5
IGNhc2UgSSBjYW4gdGhpbmsgb2Ygd2hlcmUgYSByZXNlcnZlZCBwb3J0ICMgbWVhbnMKIAkgKiAg
c29tZXRoaW5nLikKIAkgKi8KIAlzcG9ydCA9IG50b2hzKHRyYW5zcC0+eHBfcmFkZHIuc2luX3Bv
cnQpOwotCXNhZGRyID0gbnRvaGwodHJhbnNwLT54cF9yYWRkci5zaW5fYWRkci5zX2FkZHIpOwog
CWlmICgocnFzdHAtPnJxX3Byb2MgIT0gTlVMTFBST0MgJiYgc3BvcnQgPj0gSVBQT1JUX1JFU0VS
VkVEKSB8fAotCSAgICBzYWRkciAhPSAweDdmMDAwMDAxKSB7Ci0JCXN5c2xvZyhMT0dfRVJSLCAi
cmVxIGZyb20gaXA9MHgleCBwb3J0PSVkXG4iLCBzYWRkciwgc3BvcnQpOworCSAgICB0cmFuc3At
PnhwX3JhZGRyLnNpbl9hZGRyLnNfYWRkciAhPSBmcm9taXAuc19hZGRyKSB7CisJCXN5c2xvZyhM
T0dfRVJSLCAicmVxIGZyb20gaXA9JXMgcG9ydD0lZFxuIiwKKwkJICAgIGluZXRfbnRvYSh0cmFu
c3AtPnhwX3JhZGRyLnNpbl9hZGRyKSwgc3BvcnQpOwogCQlzdmNlcnJfd2Vha2F1dGgodHJhbnNw
KTsKIAkJcmV0dXJuOwogCX0KQEAgLTcyMSw1ICs3MzYsNSBAQCB1c2FnZSh2b2lkKQogewogCiAJ
ZXJyeCgxLAotCSAgICAidXNhZ2U6IG5mc3VzZXJkIFstdXNlcm1heCBjYWNoZV9zaXplXSBbLXVz
ZXJ0aW1lb3V0IG1pbnV0ZXNdIFstdmVyYm9zZV0gWy1tYW5hZ2UtZ2lkc10gWy1kb21haW4gZG9t
YWluX25hbWVdIFtuXSIpOworCSAgICAidXNhZ2U6IG5mc3VzZXJkIFstdXNlcm1heCBjYWNoZV9z
aXplXSBbLXVzZXJ0aW1lb3V0IG1pbnV0ZXNdIFstdmVyYm9zZV0gWy1tYW5hZ2UtZ2lkc10gWy1k
b21haW4gZG9tYWluX25hbWVdIFstZnJvbWlwIHh4Lnh4Lnh4Lnh4XSBbbl0iKTsKIH0KLS0tIG5m
c3VzZXJkLjguc2F2CTIwMTUtMTItMDkgMTk6MTM6NDguMTczODEyMDAwIC0wNTAwCisrKyBuZnN1
c2VyZC44CTIwMTUtMTItMDkgMTk6MTk6MzguNTIyNTE2MDAwIC0wNTAwCkBAIC0yNCw3ICsyNCw3
IEBACiAuXCIKIC5cIiAkRnJlZUJTRDogaGVhZC91c3Iuc2Jpbi9uZnN1c2VyZC9uZnN1c2VyZC44
IDI3NjI1OCAyMDE0LTEyLTI2IDIxOjU2OjIzWiBqb2VsICQKIC5cIgotLkRkIE5vdmVtYmVyIDEs
IDIwMTUKKy5EZCBEZWNlbWJlciA5LCAyMDE1CiAuRHQgTkZTVVNFUkQgOAogLk9zCiAuU2ggTkFN
RQpAQCAtMzcsNiArMzcsNyBAQCBzZXJ2aWNlcyBwbHVzIHN1cHBvcnQgbWFuYWdlLWdpZHMgZm9y
IGFsCiAuT3AgRmwgZG9tYWluIEFyIGRvbWFpbl9uYW1lCiAuT3AgRmwgdXNlcnRpbWVvdXQgQXIg
bWludXRlcwogLk9wIEZsIHVzZXJtYXggQXIgbWF4X2NhY2hlX3NpemUKKy5PcCBGbCBmcm9taXAg
QXIgaXBfYWRkcmVzcwogLk9wIEZsIHZlcmJvc2UKIC5PcCBGbCBmb3JjZQogLk9wIEZsIG1hbmFn
ZS1naWRzCkBAIC03Niw2ICs3NywyMSBAQCB0aGUgbW9yZSBrZXJuZWwgbWVtb3J5IGlzIHVzZWQs
IGJ1dCB0aGUgCiBzeXN0ZW0gY2FuIGFmZm9yZCB0aGUgbWVtb3J5IHVzZSwgbWFrZSB0aGlzIHRo
ZSBzdW0gb2YgdGhlIG51bWJlciBvZgogZW50cmllcyBpbiB5b3VyIGdyb3VwIGFuZCBwYXNzd29y
ZCBkYXRhYmFzZXMuCiBUaGUgZGVmYXVsdCBpcyAyMDAgZW50cmllcy4KKy5JdCBGbCBmcm9taXAg
QXIgaXBfYWRkcmVzcworVGhpcyBvdmVycmlkZXMgdGhlIGRlZmF1bHQgdXBjYWxsIGZyb20gYWRk
cmVzcyBvZiAxMjcuMC4wLjEuCitBbHRob3VnaCB0aGUgdXBjYWxsIGNvbm5lY3Rpb24gaXMgZG9u
ZSB0byAxMjcuMC4wLjEsIHNvbWUgbmV0d29yaworY29uZmlndXJhdGlvbnMgd2lsbCByZXN1bHQg
aW4gYW5vdGhlciBJUCBhZGRyZXNzIGFzc2lnbmVkIHRvIHRoZSBtYWNoaW5lCithcyB0aGUgZnJv
bSBhZGRyZXNzLgorSWYgeW91IGdldCBzeXNsb2cgbWVzc2FnZXMgbGlrZToKKy5zcAorLm5mCitE
ZWMgIDkgMTk6MDM6MjAgbmZzdjQtbGFwdG9wIG5mc3VzZXJkOls1MDZdOiByZXEgZnJvbSBpcD0x
MzEuMTA0LjQ4LjE3IHBvcnQ9ODYxCisuZmkKKy5zcAordGhlbiB5b3Ugc2hvdWxkIHVzZSB0aGlz
IG9wdGlvbiB0byBzZXQgdGhlIGZyb20gSVAgYWRkcmVzcyB0byB0aGUgb25lIGluCit0aGUgbWVz
c2FnZS4KK09ubHkgZG8gdGhpcyBmb3IgSVAgYWRkcmVzc2VzIGFzc2lnbmVkIHRvIHRoZSBtYWNo
aW5lIHRoaXMgZGFlbW9uIGlzIHJ1bm5pbmcKK29uLgogLkl0IEZsIHZlcmJvc2UKIFdoZW4gc2V0
LCB0aGUgc2VydmVyIGxvZ3MgYSBidW5jaCBvZiBpbmZvcm1hdGlvbiB0byBzeXNsb2cuCiAuSXQg
RmwgZm9yY2UK
------=_Part_126601978_687480826.1449754639528--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?521574245.126601980.1449754639530.JavaMail.zimbra>