On Thu, Dec 13, 2018 at 10:40 AM Ted Unangst <[email protected]> wrote:
> netstat -an tells me I am listening to all the udp. > > Active Internet connections (including servers) > Proto Recv-Q Send-Q Local Address Foreign Address > (state) > udp 0 0 *.* *.* > udp 0 0 127.0.0.1.53 *.* > udp 0 0 *.* *.* > udp 0 0 *.5353 *.* > udp 0 0 *.* *.* > > What are those *.* sockets doing? How can you listen to all the ports? > Those are just UDP sockets on which connect() hasn't been called and that aren't in the middle of a recvfrom() or recvmsg(), no? And, perhaps more directly, how would I block this in pf.conf? > Excellent choice, blocking dhclient from receiving the leases that it requests. "What problem are you trying to solve?" Philip Guenther

