em0 hijacking traffic to port 623

[Danny Braniss]

> On 5/22/07, Dag-Erling Smørgrav <des at des.no> wrote:
> > Ian FREISLICH <ianf at clue.co.za> writes:
> > > No, it's a March 6 current.  How safe is it to just update the
> > > sys/dev/em directory and recompile?  Quite a lot has changed in
> > > CURRENT since then and I don't want to update everything on these
> > > servers just yet.
> >
> > Quick workaround: configure inetd to listen to port 623 so rpcbind
> > won't assign these ports to the NFS server.  Something like this:
> >
> > asf-rmcp dgram  udp     nowait  root    /bin/false              false
> > asf-rmcp stream tcp     nowait  root    /bin/false              false
> > You dont have to do anything this crude btw, there is an setting
> in rc.conf I believe to control the range, I'm rusty on the details
> right now, I discovered this while working this same issue with
> Yahoo, but its been 6 months or more since.
> 

in loader.conf:
net.inet.ip.portrange.lowlast="665"

danny

> Jack