From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-la0-f47.google.com ([209.85.215.47]) by pp; Thu May 21 14:08:30 EDT 2015
Received: by laat2 with SMTP id t2so108504545laa.1
        for <9front@9front.org>; Thu, 21 May 2015 11:08:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=u5CIWAbQM2dv7biRp29gs9GVTexUXvIsxYqEygnSm5M=;
        b=fd4fbB1oCpK91hvbvJueQooGhae7XWWR+LyTe1/IvFTQczux8SHdPLdrhbzkuRcbtO
         y8dDAXXxOGW2dKo/Lw6YWDEqHDChhAG1LJHe9rJOuhEbHx6LdJr8xK8f33qYei+8HHxL
         xNX4U2rwBbu/DKYiUkvlgjKqjZBxSz4qwyfs579m8sEzuUfd2s7KZu6Vgkwf7WxJvBqH
         XSuNhYe8QWvsXFBoPm5EgA530qH6lSGununK45YClVbLG7kgRy86m389EeH5G39CEZys
         nxIQyte1JE7iZG6MH02REnLVa17oyiEsdO0rUeiRXI0Oplr9BZHyYMptFpP20FZah9YJ
         DjTA==
MIME-Version: 1.0
X-Received: by 10.112.182.4 with SMTP id ea4mr1222753lbc.35.1432231706437;
 Thu, 21 May 2015 11:08:26 -0700 (PDT)
Received: by 10.25.206.75 with HTTP; Thu, 21 May 2015 11:08:26 -0700 (PDT)
In-Reply-To: <fe6dd39be3601c81d8bde42b4dc41f76@u2.inri>
References: <fe6dd39be3601c81d8bde42b4dc41f76@u2.inri>
Date: Thu, 21 May 2015 11:08:26 -0700
Message-ID: <CAFgOgC89T7k16ptFZL=f0KBid1=c=SQBqMz5LMZEiQXeVHtArg@mail.gmail.com>
List-ID: <9front.9front.org>
X-Glyph: ➈
X-Bullshit: encrypted compliant general-purpose property database
Subject: Re: [9front] proposal: disable most of /rc/bin/services/tcp* by default
From: "Devon H. O'Dell" <devon.odell@gmail.com>
To: 9front@9front.org
Content-Type: text/plain; charset=UTF-8

2015-05-21 9:27 GMT-07:00  <sl@9front.org>:
>> This is a cpu server, there will be at least *one* service listening (cpu).
>> If your intend is to waste system resources, then you can as well use the
>> cpu service for that, it makes no difference what port you use.
>
> True.
>
> Here is another aspect to consider:
>
> What are the ramifications of each open port that is:
>
>         - not configured
>         - misconfigured

There's also at least a non-zero memory and computation overhead for
accepting connections and putting them into TCP instead of just
dropping them.

--dho