[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chroot BIND Re: Task harden.



>>>>> "Herbert" == Herbert Xu <herbert@eriador.apana.org.au> writes:

    Herbert> Russell Coker <russell@coker.com.au> wrote:
    >> It seems that there is no system call to read a UDP packet from
    >> a socket and discover which local address it was sent to.  If
    >> you want your UDP based

    Herbert> recvfrom(2)

I believe recvfrom will only give the remote address (where the packet
come from), not the local address (where the packet was addressed).

    >> server to use as the source address the same IP that the client
    >> sent the request to (necessary to attempt security) then you
    >> need to have multiple sockets.

    Herbert> OK, this answers my question.  There isn't a way to send
    Herbert> UDP packets out with a set from address unless you bind
    Herbert> to it.  Now I would be happy if there were a "ndc
    Herbert> discif".

That could be a problem, too.
-- 
Brian May <bam@debian.org>



Reply to: