From owner-freebsd-current@FreeBSD.ORG Tue May 22 16:38:30 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 721CA16A421 for ; Tue, 22 May 2007 16:38:30 +0000 (UTC) (envelope-from jfvogel@gmail.com) Received: from nz-out-0506.google.com (nz-out-0506.google.com [64.233.162.238]) by mx1.freebsd.org (Postfix) with ESMTP id 2F7C513C483 for ; Tue, 22 May 2007 16:38:30 +0000 (UTC) (envelope-from jfvogel@gmail.com) Received: by nz-out-0506.google.com with SMTP id s1so2662837nze for ; Tue, 22 May 2007 09:38:29 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=lCXgCTUAawOqGa7vQWlOz+t9B76P+6PfpCmK2QTu1oFre5XdXxEarToDD9GO/LLnbIziiwdAMVAFzw2QIMfUC152nxn+rW0g1KYDuO1Nf8DFAucvltGKKN67kBXlsY48XJiH0UvaLrm9N4UttMlHV0H0kWl+CidXla+iarqdExw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=P+Nh5/5cEApfC6fl7nJ8TcXqK3tO07Ucy78BN3EnDelt2HjWsQNKWxUU+xlowdnsCAy7lBNpF9jf9rAAr3jdlCHwF6Z8zsj+PB1f0qPoFZbFkoZi3jSY0SeiwkdUH0ynCtdoEKG5bzgobcv+d8bjfacecWAKyJyPB8fB1WzvPqk= Received: by 10.115.88.1 with SMTP id q1mr3370867wal.1179851909231; Tue, 22 May 2007 09:38:29 -0700 (PDT) Received: by 10.114.126.10 with HTTP; Tue, 22 May 2007 09:38:29 -0700 (PDT) Message-ID: <2a41acea0705220938p20b998bfg86a6feba9abc9862@mail.gmail.com> Date: Tue, 22 May 2007 09:38:29 -0700 From: "Jack Vogel" To: "=?ISO-8859-1?Q?Dag-Erling_Sm=F8rgrav?=" In-Reply-To: <86zm3xmeyy.fsf@dwp.des.no> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <86zm3xmeyy.fsf@dwp.des.no> Cc: Ian FREISLICH , freebsd-current@freebsd.org Subject: Re: em0 hijacking traffic to port 623 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 May 2007 16:38:30 -0000 On 5/22/07, Dag-Erling Sm=F8rgrav wrote: > Ian FREISLICH writes: > > No, it's a March 6 current. How safe is it to just update the > > sys/dev/em directory and recompile? Quite a lot has changed in > > CURRENT since then and I don't want to update everything on these > > servers just yet. > > Quick workaround: configure inetd to listen to port 623 so rpcbind > won't assign these ports to the NFS server. Something like this: > > asf-rmcp dgram udp nowait root /bin/false false > asf-rmcp stream tcp nowait root /bin/false false You dont have to do anything this crude btw, there is an setting in rc.conf I believe to control the range, I'm rusty on the details right now, I discovered this while working this same issue with Yahoo, but its been 6 months or more since. Jack