Re: [whatwg/fetch] Add port blocking for tftp, netbios-ns, snmp, rtsp, h323gatestat, h32… (#1148) from Adam Rice on 2021-02-12 (public-webapps-github@w3.org from February 2021)

From: Adam Rice <notifications@github.com>
Date: Thu, 11 Feb 2021 21:49:31 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/1148/c777990444@github.com>

I was incorrect about the protocol being UDP-only, sorry.

From my research, it appears that modern Amanda mostly uses TCP on port 10080 but historically Amanda used UDP. I haven't been able to find out whether the TCP Amanda protocol also embeds port numbers in the message. The only ALG implementation for Amanda I've been able to find is the Linux one, so it may be okay to consider TCP safe.

I've started gathering statistics on use of these ports and hope to have some preliminary results next week. I will share them when I have something.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1148#issuecomment-777990444

Received on Friday, 12 February 2021 05:49:44 UTC