- Package:
- openbsd-inetd
- Source:
- openbsd-inetd
- Description:
- OpenBSD Internet Superserver
- Submitter:
- Andrzej Dzik
- Date:
- 2023-01-02 14:06:02 UTC
- Severity:
- normal
Service exceeds -R limit but if service listens on ports below 1024 I can see '...(looping)...' in syslog. if service listens on ports above 1024 there isn't any entry in syslog.
This is a feature, but I do not understand its rationale:
if (sep->se_family == AF_INET &&
ntohs(sep->se_ctrladdr_in.sin_port) >=
IPPORT_RESERVED) {
/*
* Cannot close it -- there are
* thieves on the system.
* Simply ignore the connection.
*/
This change was made by Theo de Raadt in 1997, maybe he can explain the rationale? http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/inetd/inetd.c.diff?r1=1.38&r2=1.39&f=h I do not understand why the errors are suppressed for non-reserved ports, and also only for AF_INET but not AF_INET6 or AF_UNIX.