Re: [whatwg/fetch] Should we block port 10080? (#1191)

Summarising what we know so far:
* Port 10080 is used for the Amanda protocol, used by the backup software "Amanda". It sends port numbers in messages from client -> server, and then expects the server to connect back to the client, similar to FTP in PORT mode.
* Amanda originally used UDP, but recent versions prefer TCP.
* Products from Cisco and Juniper can intercept UDP over port 10080, and create dynamic NAT mappings back to the source host.
  * We do not know what proportion of deployed devices have this enabled.
* Linux-based products do not intercept port 10080.
* No known products intercept TCP on port 10080.
* Approximately one in a million requests happen on port 10080.
* It is an attractive port for HTTP because it ends in in "80" and does not require root privileges to bind on Unix systems.
* Both Chrome and Firefox have had reports of people using port 10080.

Did I miss anything?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1191#issuecomment-797659444

Received on Friday, 12 March 2021 18:01:31 UTC