2.6.23-rc1, spamassassin vs rpc stuffs, rpc 1, spamassassin 0

2.6.23-rc1, spamassassin vs rpc stuffs, rpc 1, spamassassin 0

[Gene Heskett]

Greetings;

As in something in the rpc daemons started at boot time grabbed localhost:783, 
which is SA's local port.  I had to kill fetchmail, get x working, edit the 
services to kill the rpc stuff and reboot before spamassassin would start.

As spamassassin (spamd) is pretty important, that didn't seem to be very nice.  
As I don't use NFS here, that's no great loss.

Comments anyone?

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Is it clean in other dimensions?

Re: 2.6.23-rc1, spamassassin vs rpc stuffs, rpc 1, spamassassin 0

[Guillaume Chazarain]

> Comments anyone?

This is not specific to the kernel.
It was discussed here: http://lkml.org/lkml/2007/1/24/258
http://cyberelk.net/tim/portreserve/ seems to be the solution,
it's a pity it is not widely deployed.

Cheers.
-- 
Guillaume

Re: 2.6.23-rc1, spamassassin vs rpc stuffs, rpc 1, spamassassin 0

[H. Peter Anvin]

Guillaume Chazarain wrote:
>> Comments anyone?
> 
> This is not specific to the kernel.
> It was discussed here: http://lkml.org/lkml/2007/1/24/258
> http://cyberelk.net/tim/portreserve/ seems to be the solution,
> it's a pity it is not widely deployed.
> 

The better solution probably would have bindresvport() in glibc be aware 
of a blacklist.

	-hpa

Re: 2.6.23-rc1, spamassassin vs rpc stuffs, rpc 1, spamassassin 0

[Jan Engelhardt]

On Jul 30 2007 07:16, H. Peter Anvin wrote:
> Guillaume Chazarain wrote:
>> > Comments anyone?
>> 
>> This is not specific to the kernel.
>> It was discussed here: http://lkml.org/lkml/2007/1/24/258
>> http://cyberelk.net/tim/portreserve/ seems to be the solution,
>> it's a pity it is not widely deployed.
>> 
>
> The better solution probably would have bindresvport() in glibc be aware of a
> blacklist.

I am sure it already is.

16:21 ichi:/ws/iptables > l /etc/bindresvport.blacklist 
-rw-r--r-- 1 root root 332 Nov 25  2006 /etc/bindresvport.blacklist

But that may be a patch local to openSUSE.


	Jan
-- 

Re: 2.6.23-rc1, spamassassin vs rpc stuffs, rpc 1, spamassassin 0

[Gene Heskett]

On Monday 30 July 2007, Jan Engelhardt wrote:
>/etc/bindresvport.blacklist
[root@coyote rc3.d]# less /etc/bindresvport.blacklist
/etc/bindresvport.blacklist: No such file or directory

on an FC6 system.

Thanks.


-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
O Lord, grant that we may always be right, for Thou knowest we will
never change our minds.