Vulnerability Development mailing list archives

Re: "Re: ping flooding as normal user" and strange icmp behavior withLinux 2.4


From: Sebastian Pape <pape () DARMSTADT GMD DE>
Date: Fri, 18 Aug 2000 14:39:16 +0200

hi!
It's also a good idea to prevent normal users from using
ping. "chmod 700 /bin/ping" should do the trick.
What's that good for? If you have net access you can get "your own
ping".

A better idea would be to allow normal users to use ping, but only
allow normal pings (no options like "-p" and "-s").
iirc there should be a secure ping which prevents for example attacks
with a program called pingflood and has the ability to log to syslogd.

best regards

        Sebastian


Current thread: