Similar evil port-stealing problems happen with:

asf-rmcp        623/udp                         # ASF/IPMI Proto

> > Date: Sat, 2 Jun 2012 10:02:07 +0100
> > From: Stuart Henderson <[email protected]>
> > 
> > As with other entries in /etc/services, this adds to the ports to
> > net.inet.tcp.baddynamic, preventing using the associated ports as a
> > valid dynamic source port number.
> > 
> > OK?
> 
> Probably a good idea.  AMT is very evil.  If you enable AMT and use
> dhcp, AMT will use the same IP address as the host itself.  But it
> will steal any packets whose destination port is one of these.  I'm
> pretty sure that means using these ports for a TCP session on the host
> will fail.
> 
> > Index: services
> > ===================================================================
> > RCS file: /cvs/src/etc/services,v
> > retrieving revision 1.78
> > diff -u -p -r1.78 services
> > --- services        23 Mar 2012 15:32:31 -0000      1.78
> > +++ services        2 Jun 2012 09:00:02 -0000
> > @@ -288,6 +288,10 @@ spamd          8025/tcp                # spamd(8)
> >  spamd-sync 8025/udp                # spamd(8) synchronisation
> >  spamd-cfg  8026/tcp                # spamd(8) configuration
> >  dhcpd-sync 8067/udp                # dhcpd(8) synchronisation
> > +amt-soap-http      16992/tcp               # Intel AMT SOAP/HTTP
> > +amt-soap-https     16993/tcp               # Intel AMT SOAP/HTTPS
> > +amt-redir-tcp      16994/tcp               # Intel AMT Redirection/TCP
> > +amt-redir-tls      16995/tcp               # Intel AMT Redirection/TLS
> >  hunt               26740/udp               # hunt(6)
> >  #
> >  # Appletalk

Reply via email to