
this is a reimplementation of cpu and import utilities in rc using a tlsclient and tlssrv as the encryption and authentication layers. there is only one new service, which after authentication and encryption setup accepts an arbitrary rc script over the network and executes it with the standard filedescriptors redirected to the conversaion (this is *after* authentication and in the context of the authorized user). the new rcpu program has a few improvements over cpu(1): - doesnt mangle program arguments - the remote process will get the clients standard file descriptors, so error and output are separated and you can consume the clients input from the remote side :-) - forwards error status of remote process theres no backwards mode for rimport, but a new program called rexport for the same purpose. all these services use exportfs without the bolted on initial handshake, so the hope is to clean up exportfs in the future and remove all the ugly crap in there.
398 lines
9.8 KiB
Text
398 lines
9.8 KiB
Text
#
|
|
# The master for this file is /n/fs/lib/ndb/common
|
|
#
|
|
|
|
#
|
|
# real dns root server ips
|
|
#
|
|
dom=A.ROOT-SERVERS.NET ip=198.41.0.4
|
|
dom=B.ROOT-SERVERS.NET ip=192.228.79.201 # jan 2004
|
|
dom=C.ROOT-SERVERS.NET ip=192.33.4.12
|
|
dom=D.ROOT-SERVERS.NET ip=199.7.91.13
|
|
dom=E.ROOT-SERVERS.NET ip=192.203.230.10
|
|
dom=F.ROOT-SERVERS.NET ip=192.5.5.241
|
|
dom=G.ROOT-SERVERS.NET ip=192.112.36.4
|
|
dom=H.ROOT-SERVERS.NET ip=128.63.2.53
|
|
dom=I.ROOT-SERVERS.NET ip=192.36.148.17
|
|
dom=J.ROOT-SERVERS.NET ip=192.58.128.30 # nov 2002
|
|
dom=K.ROOT-SERVERS.NET ip=193.0.14.129
|
|
dom=L.ROOT-SERVERS.NET ip=199.7.83.42 # nov 2007
|
|
dom=M.ROOT-SERVERS.NET ip=202.12.27.33
|
|
|
|
dom=A.ROOT-SERVERS.NET ip=2001:503:ba3e::2:30
|
|
dom=B.ROOT-SERVERS.NET ip=2001:478:65::53
|
|
dom=D.ROOT-SERVERS.NET ip=2001:500:2d::d
|
|
dom=F.ROOT-SERVERS.NET ip=2001:500:2f::f
|
|
dom=H.ROOT-SERVERS.NET ip=2001:500:1::803f:235
|
|
dom=I.ROOT-SERVERS.NET ip=2001:7fe::53
|
|
dom=J.ROOT-SERVERS.NET ip=2001:503:c27::2:30
|
|
dom=K.ROOT-SERVERS.NET ip=2001:7fd::1
|
|
dom=L.ROOT-SERVERS.NET ip=2001:500:3::42
|
|
dom=M.ROOT-SERVERS.NET ip=2001:dc3::35
|
|
|
|
dom=a.gtld-servers.net ip=192.5.6.30
|
|
dom=b.gtld-servers.net ip=192.33.14.30
|
|
dom=c.gtld-servers.net ip=192.26.92.30
|
|
dom=d.gtld-servers.net ip=192.31.80.30
|
|
dom=e.gtld-servers.net ip=192.12.94.30
|
|
dom=f.gtld-servers.net ip=192.35.51.30
|
|
dom=g.gtld-servers.net ip=192.42.93.30
|
|
dom=h.gtld-servers.net ip=192.54.112.30
|
|
dom=i.gtld-servers.net ip=192.43.172.30
|
|
dom=j.gtld-servers.net ip=192.48.79.30
|
|
dom=k.gtld-servers.net ip=192.52.178.30
|
|
dom=l.gtld-servers.net ip=192.41.162.30
|
|
dom=m.gtld-servers.net ip=192.55.83.30
|
|
|
|
dom=a.gtld-servers.net ip=2001:503:a83e::2:30
|
|
dom=b.gtld-servers.net ip=2001:503:231d::2:30
|
|
|
|
#
|
|
# spam defense. unfortunately, arin doesn't give negative
|
|
# rcodes for these non-routable addresses. we'll do it for them.
|
|
#
|
|
dom=10.in-addr.arpa soa= # rfc1918 zones
|
|
dom=16.172.in-addr.arpa soa=
|
|
dom=17.172.in-addr.arpa soa=
|
|
dom=18.172.in-addr.arpa soa=
|
|
dom=19.172.in-addr.arpa soa=
|
|
dom=20.172.in-addr.arpa soa=
|
|
dom=21.172.in-addr.arpa soa=
|
|
dom=22.172.in-addr.arpa soa=
|
|
dom=23.172.in-addr.arpa soa=
|
|
dom=24.172.in-addr.arpa soa=
|
|
dom=25.172.in-addr.arpa soa=
|
|
dom=26.172.in-addr.arpa soa=
|
|
dom=27.172.in-addr.arpa soa=
|
|
dom=28.172.in-addr.arpa soa=
|
|
dom=29.172.in-addr.arpa soa=
|
|
dom=30.172.in-addr.arpa soa=
|
|
dom=31.172.in-addr.arpa soa=
|
|
dom=168.192.in-addr.arpa soa=
|
|
dom=0.in-addr.arpa soa= # rfc3330 zones
|
|
dom=127.in-addr.arpa soa=
|
|
dom=254.169.in-addr.arpa soa=
|
|
dom=2.0.192.in-addr.arpa soa=
|
|
dom=255.255.255.255.in-addr.arpa soa=
|
|
dom=d.f.ip6.arpa soa= # rfc4193 recommendation
|
|
dom=0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa soa= # rfc4291 zones
|
|
dom=1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa soa=
|
|
dom=8.e.f.ip6.arpa soa=
|
|
dom=9.e.f.ip6.arpa soa=
|
|
dom=a.e.f.ip6.arpa soa=
|
|
dom=b.e.f.ip6.arpa soa=
|
|
refresh=86400 ttl=86400
|
|
ns=a.root-servers.net
|
|
ns=j.root-servers.net
|
|
|
|
#
|
|
# ip protocol numbers
|
|
#
|
|
protocol=reserved ipv4proto=0
|
|
protocol=icmp ipv4proto=1
|
|
protocol=igmp ipv4proto=2
|
|
protocol=ggp ipv4proto=3
|
|
protocol=ip ipv4proto=4
|
|
protocol=st ipv4proto=5
|
|
protocol=tcp ipv4proto=6
|
|
protocol=ucl ipv4proto=7
|
|
protocol=egp ipv4proto=8
|
|
protocol=igp ipv4proto=9
|
|
protocol=bbn-rcc-mon ipv4proto=10
|
|
protocol=nvp-ii ipv4proto=11
|
|
protocol=pup ipv4proto=12
|
|
protocol=argus ipv4proto=13
|
|
protocol=emcon ipv4proto=14
|
|
protocol=xnet ipv4proto=15
|
|
protocol=chaos ipv4proto=16
|
|
protocol=udp ipv4proto=17
|
|
protocol=mux ipv4proto=18
|
|
protocol=dcn-meas ipv4proto=19
|
|
protocol=hmp ipv4proto=20
|
|
protocol=prm ipv4proto=21
|
|
protocol=xns-idp ipv4proto=22
|
|
protocol=trunk-1 ipv4proto=23
|
|
protocol=trunk-2 ipv4proto=24
|
|
protocol=leaf-1 ipv4proto=25
|
|
protocol=leaf-2 ipv4proto=26
|
|
protocol=rdp ipv4proto=27
|
|
protocol=irtp ipv4proto=28
|
|
protocol=iso-tp4 ipv4proto=29
|
|
protocol=netblt ipv4proto=30
|
|
protocol=mfe-nsp ipv4proto=31
|
|
protocol=merit-inp ipv4proto=32
|
|
protocol=sep ipv4proto=33
|
|
protocol=3pc ipv4proto=34
|
|
protocol=idpr ipv4proto=35
|
|
protocol=xtp ipv4proto=36
|
|
protocol=ddp ipv4proto=37
|
|
protocol=idpr-cmtp ipv4proto=38
|
|
protocol=tp++ ipv4proto=39
|
|
protocol=il ipv4proto=40
|
|
protocol=sip ipv4proto=41
|
|
protocol=sdrp ipv4proto=42
|
|
protocol=sip-sr ipv4proto=43
|
|
protocol=sip-frag ipv4proto=44
|
|
protocol=idrp ipv4proto=45
|
|
protocol=rsvp ipv4proto=46
|
|
protocol=gre ipv4proto=47
|
|
protocol=mhrp ipv4proto=48
|
|
protocol=bna ipv4proto=49
|
|
protocol=sipp-esp ipv4proto=50
|
|
protocol=sipp-ah ipv4proto=51
|
|
protocol=i-nlsp ipv4proto=52
|
|
protocol=swipe ipv4proto=53
|
|
protocol=nhrp ipv4proto=54
|
|
protocol=ipv6-icmp ipv4proto=58
|
|
protocol=ipv6-nonxt ipv4proto=59
|
|
protocol=ipv6-opts ipv4proto=60
|
|
protocol=any ipv4proto=61
|
|
protocol=cftp ipv4proto=62
|
|
protocol=any ipv4proto=63
|
|
protocol=sat-expak ipv4proto=64
|
|
protocol=kryptolan ipv4proto=65
|
|
protocol=rvd ipv4proto=66
|
|
protocol=ippc ipv4proto=67
|
|
protocol=any ipv4proto=68
|
|
protocol=sat-mon ipv4proto=69
|
|
protocol=visa ipv4proto=70
|
|
protocol=ipcv ipv4proto=71
|
|
protocol=cpnx ipv4proto=72
|
|
protocol=cphb ipv4proto=73
|
|
protocol=wsn ipv4proto=74
|
|
protocol=pvp ipv4proto=75
|
|
protocol=br-sat-mon ipv4proto=76
|
|
protocol=sun-nd ipv4proto=77
|
|
protocol=wb-mon ipv4proto=78
|
|
protocol=wb-expak ipv4proto=79
|
|
protocol=iso-ip ipv4proto=80
|
|
protocol=vmtp ipv4proto=81
|
|
protocol=secure-vmtp ipv4proto=82
|
|
protocol=vines ipv4proto=83
|
|
protocol=ttp ipv4proto=84
|
|
protocol=nsfnet-igp ipv4proto=85
|
|
protocol=dgp ipv4proto=86
|
|
protocol=tcf ipv4proto=87
|
|
protocol=igrp ipv4proto=88
|
|
protocol=ospfigp ipv4proto=89 protocol=ospf
|
|
protocol=sprite-rpc ipv4proto=90
|
|
protocol=larp ipv4proto=91
|
|
protocol=mtp ipv4proto=92
|
|
protocol=ax.25 ipv4proto=93
|
|
protocol=ipip ipv4proto=94
|
|
protocol=micp ipv4proto=95
|
|
protocol=scc-sp ipv4proto=96
|
|
protocol=etherip ipv4proto=97
|
|
protocol=encap ipv4proto=98
|
|
protocol=any ipv4proto=99
|
|
protocol=gmtp ipv4proto=100
|
|
protocol=rudp ipv4proto=254 # unofficial
|
|
|
|
#
|
|
# services
|
|
#
|
|
tcp=cs port=1
|
|
tcp=echo port=7
|
|
tcp=discard port=9
|
|
tcp=systat port=11
|
|
tcp=daytime port=13
|
|
tcp=netstat port=15
|
|
tcp=chargen port=19
|
|
tcp=ftp-data port=20
|
|
tcp=ftp port=21
|
|
tcp=ssh port=22
|
|
tcp=telnet port=23
|
|
tcp=smtp port=25
|
|
tcp=time port=37
|
|
tcp=whois port=43
|
|
tcp=dns port=53
|
|
tcp=domain port=53
|
|
tcp=uucp port=64
|
|
tcp=gopher port=70
|
|
tcp=rje port=77
|
|
tcp=finger port=79
|
|
tcp=http port=80
|
|
tcp=link port=87
|
|
tcp=supdup port=95
|
|
tcp=hostnames port=101
|
|
tcp=iso-tsap port=102
|
|
tcp=x400 port=103
|
|
tcp=x400-snd port=104
|
|
tcp=csnet-ns port=105
|
|
tcp=pop-2 port=109
|
|
tcp=pop3 port=110
|
|
tcp=portmap port=111
|
|
tcp=uucp-path port=117
|
|
tcp=nntp port=119
|
|
tcp=netbios port=139
|
|
tcp=imap4 port=143
|
|
tcp=imap port=143
|
|
tcp=NeWS port=144
|
|
tcp=print-srv port=170
|
|
tcp=z39.50 port=210
|
|
tcp=ldap port=389
|
|
tcp=fsb port=400
|
|
tcp=sysmon port=401
|
|
tcp=proxy port=402
|
|
tcp=proxyd port=404
|
|
tcp=https port=443
|
|
tcp=cifs port=445
|
|
tcp=ssmtp port=465
|
|
tcp=rexec port=512 restricted=
|
|
tcp=login port=513 restricted=
|
|
tcp=shell port=514 restricted=
|
|
tcp=printer port=515
|
|
tcp=ncp port=524
|
|
tcp=courier port=530
|
|
tcp=cscan port=531
|
|
tcp=uucp port=540
|
|
tcp=snntp port=563
|
|
tcp=9fs port=564
|
|
tcp=whoami port=565
|
|
tcp=guard port=566
|
|
tcp=ticket port=567
|
|
tcp=ldaps port=636
|
|
tcp=fmclient port=729
|
|
tcp=ftps-data port=989
|
|
tcp=ftps port=990
|
|
tcp=imaps port=993
|
|
tcp=pop3s port=995
|
|
tcp=ingreslock port=1524
|
|
tcp=pptp port=1723
|
|
tcp=nfs port=2049
|
|
tcp=webster port=2627
|
|
tcp=weather port=3000
|
|
tcp=mysql port=3306
|
|
tcp=sip port=5060
|
|
tcp=sips port=5061
|
|
tcp=ttcp port=5117
|
|
tcp=secstore port=5356
|
|
tcp=vnc-http port=5800
|
|
tcp=vnc port=5900
|
|
tcp=Xdisplay port=6000
|
|
tcp=styx port=6666
|
|
tcp=mpeg port=6667
|
|
tcp=rstyx port=6668
|
|
tcp=infdb port=6669
|
|
tcp=infsigner port=6671
|
|
tcp=infcsigner port=6672
|
|
tcp=inflogin port=6673
|
|
tcp=bandt port=7330
|
|
tcp=face port=32000
|
|
tcp=dhashgate port=11978
|
|
tcp=exportfs port=17007
|
|
tcp=rexexec port=17009
|
|
tcp=ncpu port=17010
|
|
tcp=cpu port=17013
|
|
tcp=rcpu port=17019
|
|
tcp=glenglenda1 port=17020
|
|
tcp=glenglenda2 port=17021
|
|
tcp=glenglenda3 port=17022
|
|
tcp=glenglenda4 port=17023
|
|
tcp=glenglenda5 port=17024
|
|
tcp=glenglenda6 port=17025
|
|
tcp=glenglenda7 port=17026
|
|
tcp=glenglenda8 port=17027
|
|
tcp=glenglenda9 port=17028
|
|
tcp=glenglenda10 port=17029
|
|
tcp=nupasimap port=17030
|
|
tcp=nupasimaps port=17031
|
|
tcp=flyboy port=17032
|
|
tcp=venti port=17034
|
|
tcp=wiki port=17035
|
|
tcp=vica port=17036
|
|
tcp=aan port=17037
|
|
|
|
|
|
# testing
|
|
tcp=9fsa port=18008
|
|
|
|
il=echo port=7
|
|
il=discard port=9
|
|
il=chargen port=19
|
|
il=whoami port=565
|
|
il=ticket port=566
|
|
il=challbox port=567
|
|
il=ocpu port=17005
|
|
il=ocpunote port=17006
|
|
il=exportfs port=17007
|
|
il=9fs port=17008
|
|
il=rexexec port=17009
|
|
il=ncpu port=17010
|
|
il=ncpunote port=17011
|
|
il=tcpu port=17012
|
|
il=cpu port=17013
|
|
il=fsauth port=17020
|
|
il=rexauth port=17021
|
|
il=changekey port=17022
|
|
il=chal port=17023
|
|
il=check port=17024
|
|
il=juke port=17026
|
|
il=video port=17028
|
|
il=vgen port=17029
|
|
il=alefnslook port=17030
|
|
il=ramfs port=17031
|
|
|
|
udp=echo port=7
|
|
udp=tacacs port=49
|
|
udp=bootps port=67
|
|
udp=tftp port=69
|
|
udp=bootpc port=68
|
|
udp=bootp port=67
|
|
udp=domain port=53
|
|
udp=dns port=53
|
|
udp=portmap port=111
|
|
udp=ntp port=123
|
|
udp=netbios-ns port=137
|
|
udp=snmp port=161
|
|
udp=ha port=434 # mobile ip home agent
|
|
udp=ikev2 port=500
|
|
udp=syslog port=514
|
|
udp=rip port=520
|
|
udp=dhcp6c port=546
|
|
udp=dhcp6s port=547
|
|
udp=nfs port=2049
|
|
udp=bfs port=2201
|
|
udp=virgil port=2202
|
|
udp=sip port=5060
|
|
udp=bandt2 port=7331 # viaducts
|
|
udp=oradius port=1812
|
|
udp=radius port=1812
|
|
udp=dhash port=11977
|
|
udp=ulctl port=12666
|
|
udp=uldata port=12667
|
|
udp=dldata port=12668
|
|
|
|
gre=ppp port=34827
|
|
|
|
#
|
|
# authdom declarations need to be visible on the inside network,
|
|
# even for outside machines. putting them here ensures
|
|
# their visibility everywhere.
|
|
#
|
|
|
|
# for geoff
|
|
auth=www.9netics.com authdom=9netics.com
|
|
auth=newcpu.9netics.net authdom=9netics.net
|
|
auth=mordor.tip9ug.jp authdom=tip9ug.jp
|
|
|
|
# for geoff's ipv6 testing
|
|
auth=9grid.hamnavoe.com
|
|
authdom=hamnavoe.com
|
|
authdom=9grid.hamnavoe.com
|
|
|
|
auth=whale.lsub.org
|
|
authdom=lsub.org
|
|
authdom=dat.escet.urjc.es
|
|
|
|
# for jmk
|
|
auth=tor.texas.9grid.us authdom=9grid.us
|
|
auth=9grid.net authdom=9grid.net
|
|
|
|
# for sape
|
|
auth=130.89.145.31 authdom=cs.utwente.nl
|
|
|
|
# for sl
|
|
auth=auth.stanleylieber.com authdom=inri
|
|
auth=mars2.inri.net authdom=mars2
|
|
auth=cb.inri.net authdom=nyc
|