Subject: Re: ping floods
To: None <thorpej@nas.nasa.gov>
From: Bill Studenmund <wrstuden@loki.stanford.edu>
List: tech-net
Date: 03/24/1997 09:50:59
>
> On Mon, 24 Mar 1997 01:56:51 +0000
> Nick Loman <nick@csosl.co.uk> wrote:
>
> > I'm getting fed-up of my users doing ping floods (ping -s 8000 host)
> > whenever they encounter a lame user on IRC. Can anyone suggest a way of
> > keeping ping ability available to users without them being able to run
> > commands like this which will soak up all my bandwidth uselessly?
>
> My first inclination would be to restrict the "-s size" option to
> the superuser, the same way "-f" is... and, basically, for the same
> reason :-)
>
> If folks think this is generally a good idea, I'll go ahead and
> make such a change to the ping sources.
How about instead having ping log the use of -s? That way you can catch a
naughty user once. :-)
Such choices should probably be site-selectable.
Take care,
Bill