Re: Ports 0-1023?

[Sebastian Krahmer <krahmer () suse de>]

On Thu, 4 Jul 2002, Michal Zalewski wrote:

Hi,

> On Thu, 4 Jul 2002, Blue Boar wrote:
>
> > Is there any point in needing to be root in order to allocate the low ports
> > on unix-like systems, anymore?
>
> As long as you keep the old privilege model, of course. You don't want
> your users to bind port 25 when Sendmail goes down for a short while
> (actually, you can induce it pretty easily in certain configurations).
Thats not even needed. A very nice trick is to bind
to a more specific address if sendmail or apache
binds to INADDR_ANY. Then one should bind to the real
IP and wait what is coming ;-)

regards,
Sebastian

-- 
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer () suse de - SuSE Security Team
~