add services entries for Matter, a protocol for discovery and comms
with "smart home"/IoT devices, which runs over TCP or UDP over v6 over
various physical/network layers (Ethernet, Wifi, or low power lossy
radio-based networks like Thread). req by Jordan Williams ok deraadt

https://csa-iot.org/wp-content/uploads/2022/11/22-27349-001_Matter-1.0-Core-Specification.pdf

After RFC 9110, the IANA services registry now lists both udp and tcp
for https (HTTP/3 over QUIC). Add it to /etc/services so that it's included
when /etc/rc populates sysctl net.inet.udp.baddynamic.

suggested by Renauld Allard, ok tb@

Add openvpn ports (udp/1194 & tcp/1194) to /etc/services

Registered at IANA since 2004, also present on Linux & FreeBSD

ok sthen@ stsp@ jca@

nameserver alias on domain (53) collided with true nameserver (42)
which would be parsed earlier in any case. what a weird piece of
history.
from Raf Czlonka

The official service name of tcp/465 is "submissions"

Keep "smtps" as an alias.
https://datatracker.ietf.org/doc/html/rfc8314#section-7.3

ok sthen@ florian@ kmos@

Drop swat (tcp/901)

The Samba Web Administration Tool has been dropped by the samba project and
TCP port 901 is not registered at IANA. ok sthen@ florian@ kmos@

slight tidy-up of /etc/services:

- remove a few UDP entries for protocols that are TCP-only

- drop some obsolete protocols

- move smtps/465 to the standards section (rfc8314)

- move the talk about IANA's "reserve for both UDP/TCP even when you only
use one" policy from a comment in /etc/services to the manual, and talk
about how an entry in /etc/services prevents the associated port from
being used for dynamic ports (via net.inet.udp|tcp.baddynamic sysctl).

ok phessler@ florian@

add rpki-rtr port 323; ok job

Register agentx port 705 in services.

OK deraadt@

Switch cdio's default CDDB database to gnudb.gnudb.org:8880.
The freedb.org CD track database has been discontinued.

Retire cddb/888 from /etc/services. Nothing uses this any longer.
gnudb.org uses the "cddbp-alt" port of 8880, but we don't need a
services(5) entry for a single site.

ok deraadt@

Add domain-s also known as DNS over TLS (DoT)

ok deraadt@ florian@

list the ports for gre in udp, as per rfc8086 and iana assignments.

ok benno@ deraadt@

Add services entries for BFD (RFC5880), and reorder MS RDP while there.
From Denis Fondras, ok deraadt

add entries for xmpp, mdns and puppet

ok aja@

Add syslog-tls 6514/tcp to etc/services.
OK jasper

Add rdp/rfb/vnc.
no objection from deraadt@

add svn, fix sort-order of iscsi. ok ajacoutot@ dcoppa@ phessler@

add port entries for quagga from the documentation, ok ajacoutot@

/etc/services file moved from etc to base so is no longer really
user-editable as changes will be overwritten at update time

conserver moved port, ok ajacoutot@

Shuffle more stuffs around, remove most commented blocks, just sort by
number and make the file easier on the eyes.

discussed with deraadt@

Move things around (no change):
- some unofficial services became official
- move kerberos next to afs

Add some services needed by comms/hylafax
ok ajacoutot@

Add some more unofficial services to please ports without the need to
hand-edit services(5) which moved to base; some more to come probably.

ok deraadt@

Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's added
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA
service-names-port-numbers.txt.

If anyone's interested in adding AF_UNIX support for comms between unbound
and unbound-control, that would very welcome.

OK brad@ deraadt@

Add DHCPv6.

ok deraadt@

+vxlan; remember services is parsed for baddynamic; ok reyk

Add 106/tcp (pop3pw/poppasswd) to the unofficial services list.

ok sthen@ deraadt@

Add AMT ports to /etc/services so they're entered in net.inet.tcp.baddynamic
preventing them being locally allocated as dynamic ports.

If AMT is configured with the same IP address as the host (and, in
the case of redirection/https ports, if the relevant feature is
enabled), it will steal packets sent to its ports.

ok mikeb@. kettenis@ thinks it's probably a good idea.

rollback r1.76 since it may break some tools

noticed / requested by claudio@
discussed with henning / claudio / me

zap appletalk (ddp) protocol suite here
these are obsolete and no longer available in kernel

"absolutely. ok" henning@

Add IANA allocated port for sieve: 4190.

ok sthen@ deraadt@

Add IANA officially assigned numbers for zabbix.

ok sthen@ deraadt@

Add ldp (port 646) to services. Needs both udp and tcp.
Sure deraadt@

add l2tp

dlg wants iscsi in here; ok dlg

back out bloaty bullshit from IANA

Add openvpn, gpsd and subversion, from IANA. ok djm@

Add synchronisation support for dhcpd - this allows for two dhcpd's
with the same configuration to be run on the same net and they will
keep their lease files/state in synch, and therefore allowing you to
run redundant dhcpd's. Synchronization code stolen from spamd, uses
an hmac key in /var/db/dhcpd.key if it exists.
ok krw@ deraadt@

- move some services from unofficial to the Assigned Numbers section,
including some "cleverly" positioned in the dynamic range :(

- add a couple of services relating to some ports/packages which
otherwise need a manual change to this file

looks good to ajacoutot, steven. suggestions/ok deraadt

order by port number.

okay xsa, sobrado, jdixon

`z' -> `s', as agreed w/ reyk;

Database synchronizaton for spamd/spamlogd

This adds an HMAC protected synchronization protocol for use by spamd and
spamlogd.

- spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db
entries, and will update the local /var/db/spamd accordingly.

- spamd can send updates when it makes changes to the GREY or TRAPPED
entries in the db to other hosts running spamd. (Note it does not send
WHITE entries because the other spamd will see the GREY changes and have
complete information to make appropritate decisions)

- spamlogd can send updates for WHITE db entries that it performs on the local
db to other hosts running spamd, which will then apply them on remote hosts.

note that while this diff provides synchronization for changes made to the
spamd db by the daemons, it does *not* provide for sychonizing changes
to the spamd db made manually with the spamdb command.

Synchronization protocol and most of the work by reyk@,
with a bunch of the spamd, and spamlogd stuff by me.

testing mostly at the U of A, running happily there under big load.

ok reyk@ jmc@

asf/ipmi balony at udp 623; sthen@bootes.spacehopper.org

add "iapp" (port 3517), as used by hostapd(8).

the official assignment by the IANA for the IEEE 802.11f Inter Access
Point Protocol on port 3517 is 802-11-iapp, we use it as an alias.

ok jakob@, deraadt@

kill spaces

add eppc, Remote AppleEvents; ok theo

add sql server from iana. comments jolan@, sturm@; 'ok with the right names' deraadt@

Adding netplan, 2983/tcp

ok deraadt@

correct comment for ipsec-nat-t;

from joel knight;
ok hshoexer@;

Add ipsec-nat-t at port 4500

typos from Jon Mosco, plus further tweak;
ok deraadt@

add ipp (Internet Printing Protocol). ok deraadt@

add daap (Digital Audio Access Protocol). ok deraadt@

add afpovertcp. ok deraadt@

branches: 1.52.2;
add "microsoft-ds"; Dries Schellekens

add rtsp. ok deraadt@

Fix a few typos, Make spamd and spamd-setup use /etc/services to find
their ports. Adds "spamd" and "spamd-cfg" services to /etc/services.
Mostly from Daniel Lucq <daniel@lucq.org>.

Remove duplicate kerberos entries; ekshell2 should probably just be removed

add ssdp 1900/{tcp.udp}. ok deraadt@

Add ldap; Jedi/Sector One

Add silc from IANA; ok millert

By request, add imaps and pop3s (TLS/SSL imap and pop3) from IANA.
There are other TLS/SSL services we could add if desired.

Add pptp; reinhard@

add postgresql port.

space nits

add pwdgen entries. PR 2557.
--
From: Sebastian Stark

cvspserver 2401/tcp; ok millert@

Add iana url and correct text; openbsd@davidkrause.com

another (*&$ kerberos entry

zap trailing spaces and tabs

typo; from Sebastian Stark <seb@todesplanet.de>

Add descriptions for afs3-update and afs3-rmtsys; kurt@seifried.org

Remove bogus "kpasswd" entry.

Add kerberos 5 services.

undo broken change

add MySQL port, ok deraadt@

s/timserver/timeserver/, ok deraadt@

add socks 1080/tcp. ok deraadt@

typo, PR#1717

Fix typo: authenication -> authentication.

Update loc-srv ports, from IANA's web page.

Fix RADIUS ports, per RFCs 2865/2866 (linuxfreak@partition.com)

add SIP (Session Initiation Protocol)

Add port 587, message submission

canna

sync imap port with IANA. OK deraadt@

add hunt

rsync

ISAKMP on UDP port 500

add some afs services

Changes to kerberos entries from art

Move webster to correct port (and out of dynamic range.)
Add "portmap" and "rpcbind" aliases for "sunrpc".
Add a few misc. services.

add cddb to unoffical services

add photuris port

Add tcp port 433, nnsp (NetNews Server Protocol).

Add Appletalk services (protocol ddp).

Add https

Synchronize kadmin service names with header files.

add icb to unoffical services

add nfs

radius services

sync & label

sync with netbsd 960418

From NetBSD: merge of 960317

Enable non-master kerberos services by default

branches: 1.1.1;
Initial revision

After RFC 9110, the IANA services registry now lists both udp and tcp
for https (HTTP/3 over QUIC). Add it to /etc/services so that it's included
when /etc/rc populates sysctl net.inet.udp.baddynamic.

suggested by Renauld Allard, ok tb@

Add openvpn ports (udp/1194 & tcp/1194) to /etc/services

Registered at IANA since 2004, also present on Linux & FreeBSD

ok sthen@ stsp@ jca@

nameserver alias on domain (53) collided with true nameserver (42)
which would be parsed earlier in any case. what a weird piece of
history.
from Raf Czlonka

The official service name of tcp/465 is "submissions"

Keep "smtps" as an alias.
https://datatracker.ietf.org/doc/html/rfc8314#section-7.3

ok sthen@ florian@ kmos@

Drop swat (tcp/901)

The Samba Web Administration Tool has been dropped by the samba project and
TCP port 901 is not registered at IANA. ok sthen@ florian@ kmos@

slight tidy-up of /etc/services:

- remove a few UDP entries for protocols that are TCP-only

- drop some obsolete protocols

- move smtps/465 to the standards section (rfc8314)

- move the talk about IANA's "reserve for both UDP/TCP even when you only
use one" policy from a comment in /etc/services to the manual, and talk
about how an entry in /etc/services prevents the associated port from
being used for dynamic ports (via net.inet.udp|tcp.baddynamic sysctl).

ok phessler@ florian@

add rpki-rtr port 323; ok job

Register agentx port 705 in services.

OK deraadt@

Switch cdio's default CDDB database to gnudb.gnudb.org:8880.
The freedb.org CD track database has been discontinued.

Retire cddb/888 from /etc/services. Nothing uses this any longer.
gnudb.org uses the "cddbp-alt" port of 8880, but we don't need a
services(5) entry for a single site.

ok deraadt@

Add domain-s also known as DNS over TLS (DoT)

ok deraadt@ florian@

list the ports for gre in udp, as per rfc8086 and iana assignments.

ok benno@ deraadt@

Add services entries for BFD (RFC5880), and reorder MS RDP while there.
From Denis Fondras, ok deraadt

add entries for xmpp, mdns and puppet

ok aja@

Add syslog-tls 6514/tcp to etc/services.
OK jasper

Add rdp/rfb/vnc.
no objection from deraadt@

add svn, fix sort-order of iscsi. ok ajacoutot@ dcoppa@ phessler@

add port entries for quagga from the documentation, ok ajacoutot@

/etc/services file moved from etc to base so is no longer really
user-editable as changes will be overwritten at update time

conserver moved port, ok ajacoutot@

Shuffle more stuffs around, remove most commented blocks, just sort by
number and make the file easier on the eyes.

discussed with deraadt@

Move things around (no change):
- some unofficial services became official
- move kerberos next to afs

Add some services needed by comms/hylafax
ok ajacoutot@

Add some more unofficial services to please ports without the need to
hand-edit services(5) which moved to base; some more to come probably.

ok deraadt@

Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's added
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA
service-names-port-numbers.txt.

If anyone's interested in adding AF_UNIX support for comms between unbound
and unbound-control, that would very welcome.

OK brad@ deraadt@

Add DHCPv6.

ok deraadt@

+vxlan; remember services is parsed for baddynamic; ok reyk

Add 106/tcp (pop3pw/poppasswd) to the unofficial services list.

ok sthen@ deraadt@

Add AMT ports to /etc/services so they're entered in net.inet.tcp.baddynamic
preventing them being locally allocated as dynamic ports.

If AMT is configured with the same IP address as the host (and, in
the case of redirection/https ports, if the relevant feature is
enabled), it will steal packets sent to its ports.

ok mikeb@. kettenis@ thinks it's probably a good idea.

rollback r1.76 since it may break some tools

noticed / requested by claudio@
discussed with henning / claudio / me

zap appletalk (ddp) protocol suite here
these are obsolete and no longer available in kernel

"absolutely. ok" henning@

Add IANA allocated port for sieve: 4190.

ok sthen@ deraadt@

Add IANA officially assigned numbers for zabbix.

ok sthen@ deraadt@

Add ldp (port 646) to services. Needs both udp and tcp.
Sure deraadt@

add l2tp

dlg wants iscsi in here; ok dlg

back out bloaty bullshit from IANA

Add openvpn, gpsd and subversion, from IANA. ok djm@

Add synchronisation support for dhcpd - this allows for two dhcpd's
with the same configuration to be run on the same net and they will
keep their lease files/state in synch, and therefore allowing you to
run redundant dhcpd's. Synchronization code stolen from spamd, uses
an hmac key in /var/db/dhcpd.key if it exists.
ok krw@ deraadt@

- move some services from unofficial to the Assigned Numbers section,
including some "cleverly" positioned in the dynamic range :(

- add a couple of services relating to some ports/packages which
otherwise need a manual change to this file

looks good to ajacoutot, steven. suggestions/ok deraadt

order by port number.

okay xsa, sobrado, jdixon

`z' -> `s', as agreed w/ reyk;

Database synchronizaton for spamd/spamlogd

This adds an HMAC protected synchronization protocol for use by spamd and
spamlogd.

- spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db
entries, and will update the local /var/db/spamd accordingly.

- spamd can send updates when it makes changes to the GREY or TRAPPED
entries in the db to other hosts running spamd. (Note it does not send
WHITE entries because the other spamd will see the GREY changes and have
complete information to make appropritate decisions)

- spamlogd can send updates for WHITE db entries that it performs on the local
db to other hosts running spamd, which will then apply them on remote hosts.

note that while this diff provides synchronization for changes made to the
spamd db by the daemons, it does *not* provide for sychonizing changes
to the spamd db made manually with the spamdb command.

Synchronization protocol and most of the work by reyk@,
with a bunch of the spamd, and spamlogd stuff by me.

testing mostly at the U of A, running happily there under big load.

ok reyk@ jmc@

asf/ipmi balony at udp 623; sthen@bootes.spacehopper.org

add "iapp" (port 3517), as used by hostapd(8).

the official assignment by the IANA for the IEEE 802.11f Inter Access
Point Protocol on port 3517 is 802-11-iapp, we use it as an alias.

ok jakob@, deraadt@

kill spaces

add eppc, Remote AppleEvents; ok theo

add sql server from iana. comments jolan@, sturm@; 'ok with the right names' deraadt@

Adding netplan, 2983/tcp

ok deraadt@

correct comment for ipsec-nat-t;

from joel knight;
ok hshoexer@;

Add ipsec-nat-t at port 4500

typos from Jon Mosco, plus further tweak;
ok deraadt@

add ipp (Internet Printing Protocol). ok deraadt@

add daap (Digital Audio Access Protocol). ok deraadt@

add afpovertcp. ok deraadt@

branches: 1.52.2;
add "microsoft-ds"; Dries Schellekens

add rtsp. ok deraadt@

Fix a few typos, Make spamd and spamd-setup use /etc/services to find
their ports. Adds "spamd" and "spamd-cfg" services to /etc/services.
Mostly from Daniel Lucq <daniel@lucq.org>.

Remove duplicate kerberos entries; ekshell2 should probably just be removed

add ssdp 1900/{tcp.udp}. ok deraadt@

Add ldap; Jedi/Sector One

Add silc from IANA; ok millert

By request, add imaps and pop3s (TLS/SSL imap and pop3) from IANA.
There are other TLS/SSL services we could add if desired.

Add pptp; reinhard@

add postgresql port.

space nits

add pwdgen entries. PR 2557.
--
From: Sebastian Stark

cvspserver 2401/tcp; ok millert@

Add iana url and correct text; openbsd@davidkrause.com

another (*&$ kerberos entry

zap trailing spaces and tabs

typo; from Sebastian Stark <seb@todesplanet.de>

Add descriptions for afs3-update and afs3-rmtsys; kurt@seifried.org

Remove bogus "kpasswd" entry.

Add kerberos 5 services.

undo broken change

add MySQL port, ok deraadt@

s/timserver/timeserver/, ok deraadt@

add socks 1080/tcp. ok deraadt@

typo, PR#1717

Fix typo: authenication -> authentication.

Update loc-srv ports, from IANA's web page.

Fix RADIUS ports, per RFCs 2865/2866 (linuxfreak@partition.com)

add SIP (Session Initiation Protocol)

Add port 587, message submission

canna

sync imap port with IANA. OK deraadt@

add hunt

rsync

ISAKMP on UDP port 500

add some afs services

Changes to kerberos entries from art

Move webster to correct port (and out of dynamic range.)
Add "portmap" and "rpcbind" aliases for "sunrpc".
Add a few misc. services.

add cddb to unoffical services

add photuris port

Add tcp port 433, nnsp (NetNews Server Protocol).

Add Appletalk services (protocol ddp).

Add https

Synchronize kadmin service names with header files.

add icb to unoffical services

add nfs

radius services

sync & label

sync with netbsd 960418

From NetBSD: merge of 960317

Enable non-master kerberos services by default

branches: 1.1.1;
Initial revision

Add openvpn ports (udp/1194 & tcp/1194) to /etc/services

Registered at IANA since 2004, also present on Linux & FreeBSD

ok sthen@ stsp@ jca@

nameserver alias on domain (53) collided with true nameserver (42)
which would be parsed earlier in any case. what a weird piece of
history.
from Raf Czlonka

The official service name of tcp/465 is "submissions"

Keep "smtps" as an alias.
https://datatracker.ietf.org/doc/html/rfc8314#section-7.3

ok sthen@ florian@ kmos@

Drop swat (tcp/901)

The Samba Web Administration Tool has been dropped by the samba project and
TCP port 901 is not registered at IANA. ok sthen@ florian@ kmos@

slight tidy-up of /etc/services:

- remove a few UDP entries for protocols that are TCP-only

- drop some obsolete protocols

- move smtps/465 to the standards section (rfc8314)

- move the talk about IANA's "reserve for both UDP/TCP even when you only
use one" policy from a comment in /etc/services to the manual, and talk
about how an entry in /etc/services prevents the associated port from
being used for dynamic ports (via net.inet.udp|tcp.baddynamic sysctl).

ok phessler@ florian@

add rpki-rtr port 323; ok job

Register agentx port 705 in services.

OK deraadt@

Switch cdio's default CDDB database to gnudb.gnudb.org:8880.
The freedb.org CD track database has been discontinued.

Retire cddb/888 from /etc/services. Nothing uses this any longer.
gnudb.org uses the "cddbp-alt" port of 8880, but we don't need a
services(5) entry for a single site.

ok deraadt@

Add domain-s also known as DNS over TLS (DoT)

ok deraadt@ florian@

list the ports for gre in udp, as per rfc8086 and iana assignments.

ok benno@ deraadt@

Add services entries for BFD (RFC5880), and reorder MS RDP while there.
From Denis Fondras, ok deraadt

add entries for xmpp, mdns and puppet

ok aja@

Add syslog-tls 6514/tcp to etc/services.
OK jasper

Add rdp/rfb/vnc.
no objection from deraadt@

add svn, fix sort-order of iscsi. ok ajacoutot@ dcoppa@ phessler@

add port entries for quagga from the documentation, ok ajacoutot@

/etc/services file moved from etc to base so is no longer really
user-editable as changes will be overwritten at update time

conserver moved port, ok ajacoutot@

Shuffle more stuffs around, remove most commented blocks, just sort by
number and make the file easier on the eyes.

discussed with deraadt@

Move things around (no change):
- some unofficial services became official
- move kerberos next to afs

Add some services needed by comms/hylafax
ok ajacoutot@

Add some more unofficial services to please ports without the need to
hand-edit services(5) which moved to base; some more to come probably.

ok deraadt@

Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's added
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA
service-names-port-numbers.txt.

If anyone's interested in adding AF_UNIX support for comms between unbound
and unbound-control, that would very welcome.

OK brad@ deraadt@

Add DHCPv6.

ok deraadt@

+vxlan; remember services is parsed for baddynamic; ok reyk

Add 106/tcp (pop3pw/poppasswd) to the unofficial services list.

ok sthen@ deraadt@

Add AMT ports to /etc/services so they're entered in net.inet.tcp.baddynamic
preventing them being locally allocated as dynamic ports.

If AMT is configured with the same IP address as the host (and, in
the case of redirection/https ports, if the relevant feature is
enabled), it will steal packets sent to its ports.

ok mikeb@. kettenis@ thinks it's probably a good idea.

rollback r1.76 since it may break some tools

noticed / requested by claudio@
discussed with henning / claudio / me

zap appletalk (ddp) protocol suite here
these are obsolete and no longer available in kernel

"absolutely. ok" henning@

Add IANA allocated port for sieve: 4190.

ok sthen@ deraadt@

Add IANA officially assigned numbers for zabbix.

ok sthen@ deraadt@

Add ldp (port 646) to services. Needs both udp and tcp.
Sure deraadt@

add l2tp

dlg wants iscsi in here; ok dlg

back out bloaty bullshit from IANA

Add openvpn, gpsd and subversion, from IANA. ok djm@

Add synchronisation support for dhcpd - this allows for two dhcpd's
with the same configuration to be run on the same net and they will
keep their lease files/state in synch, and therefore allowing you to
run redundant dhcpd's. Synchronization code stolen from spamd, uses
an hmac key in /var/db/dhcpd.key if it exists.
ok krw@ deraadt@

- move some services from unofficial to the Assigned Numbers section,
including some "cleverly" positioned in the dynamic range :(

- add a couple of services relating to some ports/packages which
otherwise need a manual change to this file

looks good to ajacoutot, steven. suggestions/ok deraadt

order by port number.

okay xsa, sobrado, jdixon

`z' -> `s', as agreed w/ reyk;

Database synchronizaton for spamd/spamlogd

This adds an HMAC protected synchronization protocol for use by spamd and
spamlogd.

- spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db
entries, and will update the local /var/db/spamd accordingly.

- spamd can send updates when it makes changes to the GREY or TRAPPED
entries in the db to other hosts running spamd. (Note it does not send
WHITE entries because the other spamd will see the GREY changes and have
complete information to make appropritate decisions)

- spamlogd can send updates for WHITE db entries that it performs on the local
db to other hosts running spamd, which will then apply them on remote hosts.

note that while this diff provides synchronization for changes made to the
spamd db by the daemons, it does *not* provide for sychonizing changes
to the spamd db made manually with the spamdb command.

Synchronization protocol and most of the work by reyk@,
with a bunch of the spamd, and spamlogd stuff by me.

testing mostly at the U of A, running happily there under big load.

ok reyk@ jmc@

asf/ipmi balony at udp 623; sthen@bootes.spacehopper.org

add "iapp" (port 3517), as used by hostapd(8).

the official assignment by the IANA for the IEEE 802.11f Inter Access
Point Protocol on port 3517 is 802-11-iapp, we use it as an alias.

ok jakob@, deraadt@

kill spaces

add eppc, Remote AppleEvents; ok theo

add sql server from iana. comments jolan@, sturm@; 'ok with the right names' deraadt@

Adding netplan, 2983/tcp

ok deraadt@

correct comment for ipsec-nat-t;

from joel knight;
ok hshoexer@;

Add ipsec-nat-t at port 4500

typos from Jon Mosco, plus further tweak;
ok deraadt@

add ipp (Internet Printing Protocol). ok deraadt@

add daap (Digital Audio Access Protocol). ok deraadt@

add afpovertcp. ok deraadt@

branches: 1.52.2;
add "microsoft-ds"; Dries Schellekens

add rtsp. ok deraadt@

Fix a few typos, Make spamd and spamd-setup use /etc/services to find
their ports. Adds "spamd" and "spamd-cfg" services to /etc/services.
Mostly from Daniel Lucq <daniel@lucq.org>.

Remove duplicate kerberos entries; ekshell2 should probably just be removed

add ssdp 1900/{tcp.udp}. ok deraadt@

Add ldap; Jedi/Sector One

Add silc from IANA; ok millert

By request, add imaps and pop3s (TLS/SSL imap and pop3) from IANA.
There are other TLS/SSL services we could add if desired.

Add pptp; reinhard@

add postgresql port.

space nits

add pwdgen entries. PR 2557.
--
From: Sebastian Stark

cvspserver 2401/tcp; ok millert@

Add iana url and correct text; openbsd@davidkrause.com

another (*&$ kerberos entry

zap trailing spaces and tabs

typo; from Sebastian Stark <seb@todesplanet.de>

Add descriptions for afs3-update and afs3-rmtsys; kurt@seifried.org

Remove bogus "kpasswd" entry.

Add kerberos 5 services.

undo broken change

add MySQL port, ok deraadt@

s/timserver/timeserver/, ok deraadt@

add socks 1080/tcp. ok deraadt@

typo, PR#1717

Fix typo: authenication -> authentication.

Update loc-srv ports, from IANA's web page.

Fix RADIUS ports, per RFCs 2865/2866 (linuxfreak@partition.com)

add SIP (Session Initiation Protocol)

Add port 587, message submission

canna

sync imap port with IANA. OK deraadt@

add hunt

rsync

ISAKMP on UDP port 500

add some afs services

Changes to kerberos entries from art

Move webster to correct port (and out of dynamic range.)
Add "portmap" and "rpcbind" aliases for "sunrpc".
Add a few misc. services.

add cddb to unoffical services

add photuris port

Add tcp port 433, nnsp (NetNews Server Protocol).

Add Appletalk services (protocol ddp).

Add https

Synchronize kadmin service names with header files.

add icb to unoffical services

add nfs

radius services

sync & label

sync with netbsd 960418

From NetBSD: merge of 960317

Enable non-master kerberos services by default

branches: 1.1.1;
Initial revision

nameserver alias on domain (53) collided with true nameserver (42)
which would be parsed earlier in any case. what a weird piece of
history.
from Raf Czlonka

The official service name of tcp/465 is "submissions"

Keep "smtps" as an alias.
https://datatracker.ietf.org/doc/html/rfc8314#section-7.3

ok sthen@ florian@ kmos@

Drop swat (tcp/901)

The Samba Web Administration Tool has been dropped by the samba project and
TCP port 901 is not registered at IANA. ok sthen@ florian@ kmos@

slight tidy-up of /etc/services:

- remove a few UDP entries for protocols that are TCP-only

- drop some obsolete protocols

- move smtps/465 to the standards section (rfc8314)

- move the talk about IANA's "reserve for both UDP/TCP even when you only
use one" policy from a comment in /etc/services to the manual, and talk
about how an entry in /etc/services prevents the associated port from
being used for dynamic ports (via net.inet.udp|tcp.baddynamic sysctl).

ok phessler@ florian@

add rpki-rtr port 323; ok job

Register agentx port 705 in services.

OK deraadt@

Switch cdio's default CDDB database to gnudb.gnudb.org:8880.
The freedb.org CD track database has been discontinued.

Retire cddb/888 from /etc/services. Nothing uses this any longer.
gnudb.org uses the "cddbp-alt" port of 8880, but we don't need a
services(5) entry for a single site.

ok deraadt@

Add domain-s also known as DNS over TLS (DoT)

ok deraadt@ florian@

list the ports for gre in udp, as per rfc8086 and iana assignments.

ok benno@ deraadt@

Add services entries for BFD (RFC5880), and reorder MS RDP while there.
From Denis Fondras, ok deraadt

add entries for xmpp, mdns and puppet

ok aja@

Add syslog-tls 6514/tcp to etc/services.
OK jasper

Add rdp/rfb/vnc.
no objection from deraadt@

add svn, fix sort-order of iscsi. ok ajacoutot@ dcoppa@ phessler@

add port entries for quagga from the documentation, ok ajacoutot@

/etc/services file moved from etc to base so is no longer really
user-editable as changes will be overwritten at update time

conserver moved port, ok ajacoutot@

Shuffle more stuffs around, remove most commented blocks, just sort by
number and make the file easier on the eyes.

discussed with deraadt@

Move things around (no change):
- some unofficial services became official
- move kerberos next to afs

Add some services needed by comms/hylafax
ok ajacoutot@

Add some more unofficial services to please ports without the need to
hand-edit services(5) which moved to base; some more to come probably.

ok deraadt@

Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's added
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA
service-names-port-numbers.txt.

If anyone's interested in adding AF_UNIX support for comms between unbound
and unbound-control, that would very welcome.

OK brad@ deraadt@

Add DHCPv6.

ok deraadt@

+vxlan; remember services is parsed for baddynamic; ok reyk

Add 106/tcp (pop3pw/poppasswd) to the unofficial services list.

ok sthen@ deraadt@

Add AMT ports to /etc/services so they're entered in net.inet.tcp.baddynamic
preventing them being locally allocated as dynamic ports.

If AMT is configured with the same IP address as the host (and, in
the case of redirection/https ports, if the relevant feature is
enabled), it will steal packets sent to its ports.

ok mikeb@. kettenis@ thinks it's probably a good idea.

rollback r1.76 since it may break some tools

noticed / requested by claudio@
discussed with henning / claudio / me

zap appletalk (ddp) protocol suite here
these are obsolete and no longer available in kernel

"absolutely. ok" henning@

Add IANA allocated port for sieve: 4190.

ok sthen@ deraadt@

Add IANA officially assigned numbers for zabbix.

ok sthen@ deraadt@

Add ldp (port 646) to services. Needs both udp and tcp.
Sure deraadt@

add l2tp

dlg wants iscsi in here; ok dlg

back out bloaty bullshit from IANA

Add openvpn, gpsd and subversion, from IANA. ok djm@

Add synchronisation support for dhcpd - this allows for two dhcpd's
with the same configuration to be run on the same net and they will
keep their lease files/state in synch, and therefore allowing you to
run redundant dhcpd's. Synchronization code stolen from spamd, uses
an hmac key in /var/db/dhcpd.key if it exists.
ok krw@ deraadt@

- move some services from unofficial to the Assigned Numbers section,
including some "cleverly" positioned in the dynamic range :(

- add a couple of services relating to some ports/packages which
otherwise need a manual change to this file

looks good to ajacoutot, steven. suggestions/ok deraadt

order by port number.

okay xsa, sobrado, jdixon

`z' -> `s', as agreed w/ reyk;

Database synchronizaton for spamd/spamlogd

This adds an HMAC protected synchronization protocol for use by spamd and
spamlogd.

- spamd can receive updates from other hosts for GREY, WHITE, and TRAPPED db
entries, and will update the local /var/db/spamd accordingly.

- spamd can send updates when it makes changes to the GREY or TRAPPED
entries in the db to other hosts running spamd. (Note it does not send
WHITE entries because the other spamd will see the GREY changes and have
complete information to make appropritate decisions)

- spamlogd can send updates for WHITE db entries that it performs on the local
db to other hosts running spamd, which will then apply them on remote hosts.

note that while this diff provides synchronization for changes made to the
spamd db by the daemons, it does *not* provide for sychonizing changes
to the spamd db made manually with the spamdb command.

Synchronization protocol and most of the work by reyk@,
with a bunch of the spamd, and spamlogd stuff by me.

testing mostly at the U of A, running happily there under big load.

ok reyk@ jmc@

asf/ipmi balony at udp 623; sthen@bootes.spacehopper.org

add "iapp" (port 3517), as used by hostapd(8).

the official assignment by the IANA for the IEEE 802.11f Inter Access
Point Protocol on port 3517 is 802-11-iapp, we use it as an alias.

ok jakob@, deraadt@

kill spaces

add eppc, Remote AppleEvents; ok theo

add sql server from iana. comments jolan@, sturm@; 'ok with the right names' deraadt@

Adding netplan, 2983/tcp

ok deraadt@

correct comment for ipsec-nat-t;

from joel knight;
ok hshoexer@;

Add ipsec-nat-t at port 4500

typos from Jon Mosco, plus further tweak;
ok deraadt@

add ipp (Internet Printing Protocol). ok deraadt@

add daap (Digital Audio Access Protocol). ok deraadt@

add afpovertcp. ok deraadt@

branches: 1.52.2;
add "microsoft-ds"; Dries Schellekens

add rtsp. ok deraadt@

Fix a few typos, Make spamd and spamd-setup use /etc/services to find
their ports. Adds "spamd" and "spamd-cfg" services to /etc/services.
Mostly from Daniel Lucq <daniel@lucq.org>.

Remove duplicate kerberos entries; ekshell2 should probably just be removed

add ssdp 1900/{tcp.udp}. ok deraadt@

Add ldap; Jedi/Sector One

Add silc from IANA; ok millert

By request, add imaps and pop3s (TLS/SSL imap and pop3) from IANA.
There are other TLS/SSL services we could add if desired.

Add pptp; reinhard@

add postgresql port.

space nits

add pwdgen entries. PR 2557.
--
From: Sebastian Stark

cvspserver 2401/tcp; ok millert@

Add iana url and correct text; openbsd@davidkrause.com

another (*&$ kerberos entry

zap trailing spaces and tabs

typo; from Sebastian Stark <seb@todesplanet.de>

Add descriptions for afs3-update and afs3-rmtsys; kurt@seifried.org

Remove bogus "kpasswd" entry.

Add kerberos 5 services.

undo broken change

add MySQL port, ok deraadt@

s/timserver/timeserver/, ok deraadt@

add socks 1080/tcp. ok deraadt@

typo, PR#1717

Fix typo: authenication -> authentication.

Update loc-srv ports, from IANA's web page.

Fix RADIUS ports, per RFCs 2865/2866 (linuxfreak@partition.com)

add SIP (Session Initiation Protocol)

Add port 587, message submission

canna

sync imap port with IANA. OK deraadt@

add hunt

rsync

ISAKMP on UDP port 500

add some afs services

Changes to kerberos entries from art

Move webster to correct port (and out of dynamic range.)
Add "portmap" and "rpcbind" aliases for "sunrpc".
Add a few misc. services.

add cddb to unoffical services

add photuris port

Add tcp port 433, nnsp (NetNews Server Protocol).

Add Appletalk services (protocol ddp).

Add https

Synchronize kadmin service names with header files.

add icb to unoffical services

add nfs

radius services

sync & label

sync with netbsd 960418

From NetBSD: merge of 960317

Enable non-master kerberos services by default

branches: 1.1.1;
Initial revision

The official service name of tcp/465 is "submissions"

Keep "smtps" as an alias.
https://datatracker.ietf.org/doc/html/rfc8314#section-7.3

ok sthen@ florian@ kmos@

Drop swat (tcp/901)

The Samba Web Administration Tool has been dropped by the samba project and
TCP port 901 is not registered at IANA. ok sthen@ florian@ kmos@

slight tidy-up of /etc/services:

- remove a few UDP entries for protocols that are TCP-only

- drop some obsolete protocols

- move smtps/465 to the standards section (rfc8314)

- move the talk about IANA's "reserve for both UDP/TCP even when you only
use one" policy from a comment in /etc/services to the manual, and talk
about how an entry in /etc/services prevents the associated port from
being used for dynamic ports (via net.inet.udp|tcp.baddynamic sysctl).

ok phessler@ florian@

add rpki-rtr port 323; ok job

Register agentx port 705 in services.

OK deraadt@

Switch cdio's default CDDB database to gnudb.gnudb.org:8880.
The freedb.org CD track database has been discontinued.

Retire cddb/888 from /etc/services. Nothing uses this any longer.
gnudb.org uses the "cddbp-alt" port of 8880, but we don't need a
services(5) entry for a single site.

ok deraadt@

Add domain-s also known as DNS over TLS (DoT)

ok deraadt@ florian@

list the ports for gre in udp, as per rfc8086 and iana assignments.

ok benno@ deraadt@

Add services entries for BFD (RFC5880), and reorder MS RDP while there.
From Denis Fondras, ok deraadt

add entries for xmpp, mdns and puppet

ok aja@

Add syslog-tls 6514/tcp to etc/services.
OK jasper

Add rdp/rfb/vnc.
no objection from deraadt@

add svn, fix sort-order of iscsi. ok ajacoutot@ dcoppa@ phessler@

add port entries for quagga from the documentation, ok ajacoutot@

/etc/services file moved from etc to base so is no longer really
user-editable as changes will be overwritten at update time

conserver moved port, ok ajacoutot@

Shuffle more stuffs around, remove most commented blocks, just sort by
number and make the file easier on the eyes.

discussed with deraadt@

Move things around (no change):
- some unofficial services became official
- move kerberos next to afs

Add some services needed by comms/hylafax
ok ajacoutot@

Add some more unofficial services to please ports without the need to
hand-edit services(5) which moved to base; some more to come probably.

ok deraadt@

Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's added
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA
service-names-port-numbers.txt.

If anyone's interested in adding AF_UNIX support for comms between unbound
and unbound-control, that would very welcome.

OK brad@ deraadt@

Add DHCPv6.

ok deraadt@

+vxlan; remember services is parsed for baddynamic; ok reyk

Add 106/tcp (pop3pw/poppasswd) to the unofficial services list.

ok sthen@ deraadt@