OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Reserved ports too limited for amd (automount) on FreeBSD 4.1
From: Doug Barton (DougBgorean.org)
Date: Mon Oct 16 2000 - 21:34:08 CDT

On Mon, 16 Oct 2000, Guolin Cheng wrote:

> Matt Heckaman,
>
> Thanks.
>
> I changed using sysctl command after FreeBSD 4.1 reboot, the problem is: even
> the parameter is changed ( sysctl -w net.inet.ip.portrange.lowfirst=2023 ), the
> amd still using ports <1024, since the reserved ports already was in use from
> 1023! and now they will be used one by one sequentially!!! :((

        Your problem is that by definition the secure port range ends at
1023. You _may_ be able to get what you want by changing IPPORT_RESERVED
in /usr/src/sys/netinet/in.h and rebuilding your world and kernel, but
it'd be a hack of potentially dangerous proportions.

Doug 

-- 
        "The dead cannot be seduced."
		- Kai, "Lexx"

	Do YOU Yahoo!?

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message