|Use sysctl to set sunrpc.min_resvport to 665 |(IPMI cards use port 664 also)
That sysctl didn't used to be available -- well I can't find it on SL308 systems.
We make xinetd listen on 623/664 (tcp + udp) which has the 'side effect' of causing those ports to be unavailable as local endpoints for sockets (we just drop trivial files into /etc/xinetd.d/) which means we only avoid *just* those ports. It also prevents *anything* from using them rather than just sunrpc...
Since a port won't get re-used for at least TTL*2 having too few available to pick from is another way to run out if they are getting used at a high rate... :-(
We tried this on 10 of the systems. When I started the test loop, it went a little longer before failing, then started failing again. Also I forgot to note that this doesn't happen with ssh.
Another good reason to drop rsh... :-) -- Jon
