From owner-freebsd-arch Wed Aug 1 14:47:46 2001 Delivered-To: freebsd-arch@freebsd.org Received: from mail.wrs.com (unknown-1-11.windriver.com [147.11.1.11]) by hub.freebsd.org (Postfix) with ESMTP id 7D63937B401; Wed, 1 Aug 2001 14:47:41 -0700 (PDT) (envelope-from jhb@FreeBSD.org) Received: from laptop.baldwin.cx (john@[147.11.46.217]) by mail.wrs.com (8.9.3/8.9.1) with ESMTP id OAA19847; Wed, 1 Aug 2001 14:47:38 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.0 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <20010801144335.C82198@xor.obsecurity.org> Date: Wed, 01 Aug 2001 14:39:00 -0700 (PDT) From: John Baldwin To: Kris Kennaway Subject: Re: Disabling portmapper (was Re: Patch to modify default inetd. Cc: stable@FreeBSD.org, arch@FreeBSD.org, Nate Williams , Robert Watson , "David O'Brien" Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 01-Aug-01 Kris Kennaway wrote: > On Wed, Aug 01, 2001 at 12:11:28PM -0700, David O'Brien wrote: >> On Wed, Aug 01, 2001 at 09:08:29AM -0400, Robert Watson wrote: >> > I'd be tempted to disable the portmapper (rpcbind in -CURRENT) by default, >> > allowing it to either be manually enabled, or enabled by virtue of >> > dependencies (something we already support). >> >> It already is disabled in -current since 2000-07-28 22:45:36 >> portmap_enable="NO" # Run the portmapper service (YES/NO). > > But does sysinstall enable it by default? For liberal and moderate security, yes. Thus by default it does. It's only left off for high and fascist security settings. -- John Baldwin -- http://www.FreeBSD.org/~jhb/ PGP Key: http://www.baldwin.cx/~john/pgpkey.asc "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message