On Fri, 03 Nov 2000 19:48:05 EST, "Steven M. Bellovin" wrote:
>>Yep.  I've used a simple set-uid tool which does binding of reserved
>>sockets this way.  An ftp proxy for instance calls bind_port() which
>>does the binding directly if possible, otherwise invokes the set-uid
>>tool to do it.  The library call and tool are both compiled from the
>>same .c file - so its easy to be sure they do things the same way.
>
>Right.  I described a similar scheme in my Firewalls book.

Sorry, the .c file credits your book with the idea ;-)

--sjg