NETWORK: udp_port_rover reluctant to rove (unlike tcp_port_rover)

From: John Dahlstrom (jd_at_freeshell.org)
Date: 01/16/05

  • Next message: Roman Zippel: "Re: 2.6.11-rc1-mm1"
    Date:	Sat, 15 Jan 2005 20:37:39 -0600 (CST)
    To: linux-kernel@vger.kernel.org
    
    

    Regarding udp_port_rover (of linux/net/ipv4/udp.c):

    In Linux 2.4 or 2.6, I noticed that selected local port numbers for UDP
    resist roaming, unlike TCP ports numbers (tcp_port_rover) that appear
    to steadily increase irrespective of concurrent local port usage.

    What is the advantage of this lack of parallel behavior? (Other than
    exacerbating broken behavior of certain firewalls that insist on fixed
    UDP source port blocking?)

    Aesthetically peculiar it seems, that the kernel reins in port roving
    for the connectionless protocol unless a UDP stampede unleashes itself,
    while allowing the TCP ports to range free across the local ports
    regardless.

    Kind regards,

    - John

    --
    http://jodarom.sdf1.org/
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at  http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at  http://www.tux.org/lkml/
    

  • Next message: Roman Zippel: "Re: 2.6.11-rc1-mm1"

    Relevant Pages

    • Re: Block UDP Ports?
      ... I'm using Checkpoint Firewall-1. ... reasonable that Firewall-1 would leave UDP wide open. ... > UDP ICMP port unreachable scanning: This scanning method varies from the ...
      (comp.security.firewalls)
    • UDP DoS attack in Win2k via IKE
      ... This memo should clarify the issue discovered with the UDP DOS ... Sending of UDP traffic to port 500 UDP will cause windows to ... attacked host is an IPSec gateway). ...
      (Bugtraq)
    • Re: LDAP UDP Port Problem
      ... The correct fix is to identify that the network gear is tossing out the UDP ... Then I did some portqry's on the LDAP port ... > Sending LDAP query to TCP port 389... ...
      (microsoft.public.windows.server.setup)
    • Re: LDAP UDP Port Problem
      ... The correct fix is to identify that the network gear is tossing out the UDP ... Then I did some portqry's on the LDAP port ... > Sending LDAP query to TCP port 389... ...
      (microsoft.public.windows.server.networking)
    • Re: Block UDP Ports?
      ... UDP scanning is questionable to many - if the port is open, ... closed ports aren't even required to send an error packet. ...
      (comp.security.firewalls)