--- Manu Abraham <[EMAIL PROTECTED]> wrote:
> Ports below 1024 are called the privileged ports, where the
> privileged 
> user has access.
> So if you have permissions to do that, well fine ..

That made me googling on this and I thought I sahre some of the links
here. I found the following discussion snippet dating back to 1998:
http://www.ussg.iu.edu/hypermail/linux/kernel/9806.1/0128.html
... interesting approach in my eyes. I like the port idea.

A similar solution is intended by
http://gentoo-wiki.com/Accessfs [Gentoo, Thank youuuu]

This FAQ suggests using port redirection with iptables to achieve it:
http://www.caucho.com/resin-3.0/install/faq.xtp#How-can-I-bind-to-a-port-under-1024-and-still-run-as-a-non-root-user?

I don't like the iptables approach too much, because this component
used to be vulnerable for DoS attacks some time back.

Dirk.


------------------------ Yahoo! Groups Sponsor --------------------~--> 
Fair play? Video games influencing politics. Click and talk back!
http://us.click.yahoo.com/T8sf5C/tzNLAA/TtwFAA/0XFolB/TM
--------------------------------------------------------------------~-> 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/dubailug/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 


Reply via email to