[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chroot BIND Re: Task harden.



Russell Coker <russell@coker.com.au> wrote:

> It seems that there is no system call to read a UDP packet from a socket and 
> discover which local address it was sent to.  If you want your UDP based 

recvfrom(2)

> server to use as the source address the same IP that the client sent the 
> request to (necessary to attempt security) then you need to have multiple 
> sockets.

OK, this answers my question.  There isn't a way to send UDP packets out with
a set from address unless you bind to it.  Now I would be happy if there
were a "ndc discif".
-- 
Debian GNU/Linux 2.2 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt



Reply to: