[Bug 214366] dns/openmdns: don't use hardcoded interface

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed Nov 9 19:30:33 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214366

            Bug ID: 214366
           Summary: dns/openmdns: don't use hardcoded interface
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: jbeich at FreeBSD.org
          Reporter: dch at skunkwerks.at
          Assignee: jbeich at FreeBSD.org
             Flags: maintainer-feedback?(jbeich at FreeBSD.org)

Created attachment 176824
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=176824&action=edit
v1 patch

# issue

hardcodes em0 as the interface and provides no knob to swap this.

https://svnweb.freebsd.org/ports/head/dns/openmdns/files/mdnsd.in?view=markup#l16

# fix

- add a knob
- set lo0 as a risk-free default

I couldn't think of a better option, considering
http://securityaffairs.co/wordpress/35607/hacking/mdns-amplify-ddos-attack.html
although I have no idea if openmdns is at risk here.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list