Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Aug 2003 12:25:44 +0200
From:      Ruben de Groot <mail23@bzerk.org>
To:        Mark <admin@asarian-host.net>
Cc:        Andy Farkas <andyf@speednet.com.au>
Subject:   Re: Restricting ICMP
Message-ID:  <20030813102544.GA84909@ei.bzerk.org>
In-Reply-To: <200308130956.H7D9U28E022832@asarian-host.net>
References:  <20030813123805.Y90272-100000@hewey.af.speednet.com.au> <200308130956.H7D9U28E022832@asarian-host.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Aug 13, 2003 at 09:56:04AM +0000, Mark typed:
> ----- Original Message ----- 
> From: "Andy Farkas" <andyf@speednet.com.au>

<SNIP>

> I am just not very fond of the idea of local users starting ICMP wars over
> the net, using my server :) I have already had an instance where a web-user
> did an excessive ping attack on one of his buddies. And, naturally, I want
> to prevent that. The chmod u-s idea mentioned here, was a good idea. Except
> that, prefereably, I'd like all of wheel to have access, and the rest not.
> And that may be harder to implement.

Not at all.

chmod 4550 /sbin/ping

-Ruben

> 
> Thanks for your answer anyway,
> 
> - Mark
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030813102544.GA84909>