From owner-freebsd-current@FreeBSD.ORG Tue May 22 09:14:11 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 182C716A400 for ; Tue, 22 May 2007 09:14:11 +0000 (UTC) (envelope-from ianf@clue.co.za) Received: from munchkin.clue.co.za (munchkin.clue.co.za [66.219.59.160]) by mx1.freebsd.org (Postfix) with ESMTP id D887613C448 for ; Tue, 22 May 2007 09:14:10 +0000 (UTC) (envelope-from ianf@clue.co.za) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=20070313; d=clue.co.za; h=Received:Received:Received:To:cc:From:Subject:In-Reply-To:X-Attribution:Date:Message-Id; b=Et50OrJ4/oOV9B+mfWBCLkRuq/nidQocR45GbIF4r84R11JSvavBo/xFc/RoPuX1oIQj78Nkcu7zFEgkoAQ4uKE7M7a0oU8kNCIACP8Xb59PuaOc3BR9ipHaVWijePtHOYdhH81qCGxz9HfT12LP9so0qdwpPrkJMXfHmElIY7MLCaWcBK9lOd6Oy2LLRR+9t+GS+8sdxUP4DHynj6DLx3YqctxLxLLpczTRrfOPegEvMsdGShw/qtrbEshebuNH; Received: from uucp by munchkin.clue.co.za with local (Exim 4.66) (envelope-from ) id 1HqQRU-0002Ex-Eo; Tue, 22 May 2007 09:14:08 +0000 Received: from cluetoy.clue.co.za ([10.0.0.19] helo=clue.co.za) by urchin.clue.co.za with esmtpa (Exim 4.66) (envelope-from ) id 1HqQQj-0002sp-Oc; Tue, 22 May 2007 09:13:21 +0000 Received: from localhost ([127.0.0.1]) by clue.co.za with esmtp (Exim 4.66 (FreeBSD)) (envelope-from ) id 1HqQQi-0000yl-ML; Tue, 22 May 2007 11:13:20 +0200 To: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= From: Ian FREISLICH In-Reply-To: Message from =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= of "Tue, 22 May 2007 10:37:09 +0200." <86zm3xmeyy.fsf@dwp.des.no> X-Attribution: BOFH Date: Tue, 22 May 2007 11:13:20 +0200 Message-Id: Cc: freebsd-current@freebsd.org, Jack Vogel Subject: Re: em0 hijacking traffic to port 623 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 May 2007 09:14:11 -0000 =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= wrote: > Ian FREISLICH writes: > > No, it's a March 6 current. How safe is it to just update the > > sys/dev/em directory and recompile? Quite a lot has changed in > > CURRENT since then and I don't want to update everything on these > > servers just yet. > > Quick workaround: configure inetd to listen to port 623 so rpcbind > won't assign these ports to the NFS server. Something like this: > > asf-rmcp dgram udp nowait root /bin/false false > asf-rmcp stream tcp nowait root /bin/false false This won't help me. These hosts are routers for several large datacenters. They're blackholing all traffic with a destination port of 623 and probably 664 in hardware. I wouldn't mind so much if it just did it for it's own IP. Ian -- Ian Freislich