Subject: Heads up: NFS reserved port changes.
To: None <current-users@NetBSD.ORG>
From: Frank van der Linden <frank@wins.uva.nl>
List: current-users
Date: 03/23/1997 22:03:40
I just checked in some changes to the NFS code:

	* The use of reserved ports is now checked for each invidual
	  NFS request. Not strictly necessary when using TCP, but
	  the check is cheap.
	* Using reserved ports is now the default. If you are using
	  -current as an NFS server, you may have to configure your
	  clients to use reserved ports if they don't already.
	* Checking for reserved ports is determined by the '-noresport'
	  option in the exports file. Reserved ports are used by
	  default, the '-noresports' option will disable this
	  requirement.

I am well aware that the use of reserved ports is nowhere near a real
solution for NFS security problems, something like secure RPC is
needed for that. However, these changes do help a little and at least
make the use of reserved ports consistent throughout the code.

- Frank