From 69d0848b62a1cdd495a523e275273842b3aa8fc0 Mon Sep 17 00:00:00 2001
From: sthen <>
Date: Sat, 2 Jun 2012 11:44:46 +0000
Subject: [PATCH] Add AMT ports to /etc/services so they're entered in
 net.inet.tcp.baddynamic preventing them being locally allocated as dynamic
 ports.

If AMT is configured with the same IP address as the host (and, in
the case of redirection/https ports, if the relevant feature is
enabled), it will steal packets sent to its ports.

ok mikeb@. kettenis@ thinks it's probably a good idea.
---
 src/etc/services | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/etc/services b/src/etc/services
index 89285cc5..28651194 100644
--- a/src/etc/services
+++ b/src/etc/services
@@ -1,4 +1,4 @@
-#	$OpenBSD: services,v 1.78 2012/03/23 15:32:31 gsoares Exp $
+#	$OpenBSD: services,v 1.79 2012/06/02 11:44:46 sthen Exp $
 #
 # Network services, Internet style
 #
@@ -288,6 +288,10 @@ spamd		8025/tcp		# spamd(8)
 spamd-sync	8025/udp		# spamd(8) synchronisation
 spamd-cfg	8026/tcp		# spamd(8) configuration
 dhcpd-sync	8067/udp		# dhcpd(8) synchronisation
+amt-soap-http	16992/tcp		# Intel AMT SOAP/HTTP
+amt-soap-https	16993/tcp		# Intel AMT SOAP/HTTPS
+amt-redir-tcp	16994/tcp		# Intel AMT Redirection/TCP
+amt-redir-tls	16995/tcp		# Intel AMT Redirection/TLS
 hunt		26740/udp		# hunt(6)
 #
 # Appletalk