home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.unix.wizards
- Path: sparky!uunet!mcsun!Germany.EU.net!news.netmbx.de!zrz.tu-berlin.de!math.fu-berlin.de!Sirius.dfn.de!darwin.sura.net!gatech!rpi!scott.skidmore.edu!psinntp!psinntp!commpost!opus!fia!pub_one!jogulin
- From: jogulin@pub_one.fia.dmg.ml.com (Joseph Ogulin)
- Subject: Re: Selecting a "safe" socket/port for a server - HELP!
- Message-ID: <1992Sep11.132403.9126@fia.dmg.ml.com>
- Sender: jogulin@pub_one (Joseph Ogulin)
- Nntp-Posting-Host: pub_one
- Organization: The Rift from Here to There
- References: <1992Sep4.234715.23719@anasazi.com> <1992Sep9.154514.22952@dickens.com>
- Date: Fri, 11 Sep 1992 13:24:03 GMT
- Lines: 43
-
- In article <1992Sep9.154514.22952@dickens.com>, lpc@dickens.com (Luis P Caamano) writes:
- |> In article <1992Sep4.234715.23719@anasazi.com> duane@anasazi.com (Duane Morse) writes:
- |> >We have a number of server programs which listen on sockets/ports
- |> >to perform various transaction processing functions. We'd rather
- |> >not make these programs have super-user privileges in order to
- |> >use privileged, low-numbered sockets/ports, because it's an adminstrative
- |> >nuisance.
- |> >
- |> >Is it a safe strategy to use high-end port numbers for the listeners
- |> >in order to avoid having client programs possibly grab the
- |> >socket/port before the server? If so, what is considered "high-end"?
- |> >If not, is there an alternate strategy?
- |>
- |> "high-end" is over 5000.
- |>
- |> From W. R. Stevens, "Unix Network Programming," pg. 303-304
- |> -----
- |> reserved ports 1-1023
- |> ports automatically assigned by system 1024-5000
- |> ports assigned by rresvport() 512-1023
- |> -----
- |> "The system doesn't automatically assign an Internet port greater than
- |> 5000. It leaves these ports for user-developed, nonprivileged servers."
- |>
- |> Now, that's what the books says. Most implementations follow this
- |> scheme, but that's not the law.
-
- You might also want to check RFC 1060 - Assigned Numbers.
-
- For those who do not know where to get them, they are available
- from nic.ddn.mil. There is an automated mail server (service@nic.ddn.mil)
- where your commands are the Subject line. They are also available through
- anonymous ftp.
-
- --
- ==> "You never f**king know the answer when it's important." --The Doctor <==
- Joe Ogulin
-
- jogulin@camelot.fia.dmg.ml.com joe@monroe.pilot.dmg.ml.com
- jogulin@apollo.stevens-tech.edu gcs_jogulin@stevens.bitnet
-
- Disclaimer: The above article is solely my opinion and does not necessar-
- ily reflect that of my employer. The content is my responsibility alone.
-