em0 hijacking traffic to port 623
Jack Vogel
jfvogel at gmail.com
Tue May 22 16:38:30 UTC 2007
On 5/22/07, Dag-Erling Smørgrav <des at des.no> wrote:
> Ian FREISLICH <ianf at clue.co.za> writes:
> > No, it's a March 6 current. How safe is it to just update the
> > sys/dev/em directory and recompile? Quite a lot has changed in
> > CURRENT since then and I don't want to update everything on these
> > servers just yet.
>
> Quick workaround: configure inetd to listen to port 623 so rpcbind
> won't assign these ports to the NFS server. Something like this:
>
> asf-rmcp dgram udp nowait root /bin/false false
> asf-rmcp stream tcp nowait root /bin/false false
You dont have to do anything this crude btw, there is an setting
in rc.conf I believe to control the range, I'm rusty on the details
right now, I discovered this while working this same issue with
Yahoo, but its been 6 months or more since.
Jack
More information about the freebsd-current
mailing list