[Bug 1430181] Re: rpcbind/rpc.statd listen on all interfaces

[Robie Basak]

16:36 <rbasak> niedbalski: I'm not sure that bug 1430181 is appropriate
to fix in an SRU or during feature freeze in Vivid (without an
exception).

16:36 <rbasak> niedbalski: seems to me that TCP binding is a new feature
because the switch is documented to support UDP only.

16:37 <rbasak> niedbalski: the patch looks pretty extensive too.

So I think this needs to wait for Vivid+1? We should have the time, in
that case, to get this patch upstreamed, instead of needing a delta in
Ubuntu specifically. Or if this isn't possible, can the reason be
explained in this bug, please?

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1430181

Title:
  rpcbind/rpc.statd listen on all interfaces

Status in rpcbind package in Ubuntu:
  In Progress
Status in rpcbind source package in Precise:
  New
Status in rpcbind source package in Trusty:
  New
Status in rpcbind source package in Utopic:
  New
Status in rpcbind source package in Vivid:
  In Progress

Bug description:
  There is no way to prevent rpcbind from listening on all interfaces
  for TCP connections. The setting "-h" only applies to UDP connections.
  There is a bug and fix from 2007:

  https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=84494

  The link to the fix gives a 404 for me, but it probably is in their
  VCS.

  How to reproduce:

  1. install rpcbind
  2. in /etc/default/rpcbind:

  OPTIONS="$OPTIONS -h 192.168.255.1"

  3. restart rpcbind

  root at node1 ~ # netstat -lnp | grep rpcbind
  tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      8982/rpcbind    
  tcp6       0      0 :::111                  :::*                    LISTEN      8982/rpcbind    
  udp        0      0 192.168.255.1:111       0.0.0.0:*                           8982/rpcbind    
  udp        0      0 127.0.0.1:111           0.0.0.0:*                           8982/rpcbind    
  udp        0      0 0.0.0.0:677             0.0.0.0:*                           8982/rpcbind    
  udp6       0      0 ::1:111                 :::*                                8982/rpcbind    
  udp6       0      0 :::677                  :::*                                8982/rpcbind    

  The same applies to rpc.statd: even when supplying the

  -n, --name ipaddr | hostname
                Specifies the bind address used for RPC listener sockets.

  option, it still listens on all interfaces, while '--outgoing-port'
  and '--port' work as expected:

  /etc/default/nfs-common:
  STATDOPTS="--name 192.168.255.1 --port 32765 --outgoing-port 32766"

  root at node1 ~ # netstat -lnp | grep rpc.statd
  tcp        0      0 0.0.0.0:32765           0.0.0.0:*               LISTEN      8988/rpc.statd  
  tcp6       0      0 :::32765                :::*                    LISTEN      8988/rpc.statd  
  udp        0      0 0.0.0.0:32765           0.0.0.0:*                           8988/rpc.statd  
  udp        0      0 127.0.0.1:684           0.0.0.0:*                           8988/rpc.statd  
  udp6       0      0 :::32765                :::*                                8988/rpc.statd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rpcbind/+bug/1430181/+subscriptions