> |Use sysctl to set sunrpc.min_resvport to 665
> |(IPMI cards use port 664 also)

That sysctl didn't used to be available -- well I can't find it on SL308 
systems.

We make xinetd listen on 623/664 (tcp + udp) which has the 'side effect' 
of causing those ports to be unavailable as local endpoints for sockets 
(we just drop trivial files into /etc/xinetd.d/) which means we only avoid 
*just* those ports.  It also prevents *anything* from using them rather 
than just sunrpc...

Since a port won't get re-used for at least TTL*2 having too few available 
to pick from is another way to run out if they are getting used at a high 
rate... :-(

> We tried this on 10 of the systems.  When I started
> the test loop, it went a little longer before failing,
> then started failing again.
>
> Also I forgot to note that this doesn't happen with ssh.

Another good reason to drop rsh... :-)

  -- Jon