From owner-freebsd-standards@FreeBSD.ORG Mon Sep 27 18:44:55 2004 Return-Path: Delivered-To: freebsd-standards@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 13DED16A4CF; Mon, 27 Sep 2004 18:44:55 +0000 (GMT) Received: from smtp.des.no (flood.des.no [217.116.83.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id C166B43D48; Mon, 27 Sep 2004 18:44:54 +0000 (GMT) (envelope-from des@des.no) Received: by smtp.des.no (Pony Express, from userid 666) id 7A5B75311; Mon, 27 Sep 2004 20:44:53 +0200 (CEST) Received: from dwp.des.no (des.no [80.203.228.37]) by smtp.des.no (Pony Express) with ESMTP id 2D1C2530A; Mon, 27 Sep 2004 20:44:48 +0200 (CEST) Received: by dwp.des.no (Postfix, from userid 2602) id 0E2BDB873; Mon, 27 Sep 2004 20:44:48 +0200 (CEST) To: Matthias Andree References: <415720FD.8080603@samsco.org> From: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=) Date: Mon, 27 Sep 2004 20:44:47 +0200 In-Reply-To: (Matthias Andree's message of "Mon, 27 Sep 2004 12:14:17 +0200") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on flood.des.no X-Spam-Level: X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=no version=2.64 cc: Scott Long cc: re@freebsd.org cc: standards@freebsd.org cc: developers@freebsd.org cc: current@freebsd.org Subject: Re: FreeBSD 5.3-BETA6 available X-BeenThere: freebsd-standards@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Standards compliance List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2004 18:44:55 -0000 Matthias Andree writes: > 5. default inetd configuration denial of service bug, conf/33670, is still > open and unpatched AND A LAST CHANCE TO FIX NOW Actually, this was fixed in HEAD a year and a week ago: ---------------------------- revision 1.188 date: 2003/09/15 16:44:24; author: nectar; state: Exp; lines: +1 -1 Add `-C 60' to the default flags for inetd, so that it is less vulnerable to run-of-the-mill DoS attacks in the default installation. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D DES --=20 Dag-Erling Sm=F8rgrav - des@des.no