Is net.inet.tcp.baddynamic expected to apply to programs using portmap? $ sysctl net.inet.tcp.baddynamic | grep -c ,993, 1
$ fstat | grep 993
root rpc.statd 84779 4* internet stream tcp 0x0 *:993
$ rpcinfo -p | grep 993
100024 1 tcp 993 status
