Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 May 2000 08:16:34 -0700 (PDT)
From:      Doug White <dwhite@resnet.uoregon.edu>
To:        Konrad Heuer <kheuer@gwdu60.gwdg.de>
Cc:        freebsd-hackers@FreeBSD.ORG
Subject:   Re: Connect to lpd on insecure port
Message-ID:  <Pine.BSF.4.21.0005080815270.65787-100000@resnet.uoregon.edu>
In-Reply-To: <Pine.BSF.4.05.10005081601490.32477-100000@gwdu60.gwdg.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 8 May 2000, Konrad Heuer wrote:

> 
> Today I did some testing concerning lpd and I was very astonished to see
> that lpd accepts jobs also from insecure ports (violating RFC 1179). It
> does not accept such jobs on 2.1.6-RELEASE (yes, I still have some old 386
> system out there with 2.1.6) but it does on 3.x (and as far as I've seen
> from the code) and 4.x and also on 2.2.6.

> Why and when has the behaviour of lpd been changed? I'd like lpd only to
> accept connections from secure ports (do you remember the famous error
> message `Malformed from address'? ;-) )

I think that particular message is why the change came about. Also pure
usability -- it's awfully hard to submit a job from a priviledged port as
a user, and I don't want to submit jobs as root.  

If you don't like it, that's what ipfw is for. :)

Doug White                    |  FreeBSD: The Power to Serve
dwhite@resnet.uoregon.edu     |  www.FreeBSD.org



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0005080815270.65787-100000>