Todd M. Lewis wrote:
> Is there a way to tell the fileservers not to talk to clients below a
> certain rev, or only allow reads? That should encourage them to upgrade.
> Or leave. Not nice maybe, but if old clients can DoS your servers...

You could patch your file servers to call rx_GetServerVersion() for any
new hosts for which a matching UUID could not be found.  You could then
compare the returned string to a list of known version strings that you
wish to block and refuse to provide service.

---

In addition, we recently committed DELTA viced-no-nulluuid-20070719.
This patch checks to see if the UUID is all zeros and if so treats the
client as if it doesn't support UUIDs at all.  This could easily be
expanded to treat an arbitrary list of known to be cloned UUIDs as if
UUIDs are not supported.  Simply read the list of known UUIDs from a
file a startup and ....

Jeffrey Altman

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to