Vulnerability Development: Re: "Re: ping flooding as normal user" and strange icmp behavior withLinux 2.4

[Sebastian Pape <pape () DARMSTADT GMD DE>]

hi!
> It's also a good idea to prevent normal users from using
> ping. "chmod 700 /bin/ping" should do the trick.
What's that good for? If you have net access you can get "your own
ping".

> A better idea would be to allow normal users to use ping, but only
> allow normal pings (no options like "-p" and "-s").
iirc there should be a secure ping which prevents for example attacks
with a program called pingflood and has the ability to log to syslogd.

best regards

        Sebastian