[Bug 214366] dns/openmdns: don't use hardcoded interface
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Wed Nov 9 19:30:33 UTC 2016
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214366
Bug ID: 214366
Summary: dns/openmdns: don't use hardcoded interface
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: Individual Port(s)
Assignee: jbeich at FreeBSD.org
Reporter: dch at skunkwerks.at
Assignee: jbeich at FreeBSD.org
Flags: maintainer-feedback?(jbeich at FreeBSD.org)
Created attachment 176824
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=176824&action=edit
v1 patch
# issue
hardcodes em0 as the interface and provides no knob to swap this.
https://svnweb.freebsd.org/ports/head/dns/openmdns/files/mdnsd.in?view=markup#l16
# fix
- add a knob
- set lo0 as a risk-free default
I couldn't think of a better option, considering
http://securityaffairs.co/wordpress/35607/hacking/mdns-amplify-ddos-attack.html
although I have no idea if openmdns is at risk here.
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ports-bugs
mailing list