Subject: Re: ping floods
To: None <thorpej@nas.nasa.gov>
From: Bill Studenmund <wrstuden@loki.stanford.edu>
List: tech-net
Date: 03/24/1997 09:50:59
> 
> On Mon, 24 Mar 1997 01:56:51 +0000 
>  Nick Loman <nick@csosl.co.uk> wrote:
> 
>  > I'm getting fed-up of my users doing ping floods (ping -s 8000 host)
>  > whenever they encounter a lame user on IRC. Can anyone suggest a way of
>  > keeping ping ability available to users without them being able to run
>  > commands like this which will soak up all my bandwidth uselessly?
> 
> My first inclination would be to restrict the "-s size" option to
> the superuser, the same way "-f" is... and, basically, for the same
> reason :-)
> 
> If folks think this is generally a good idea, I'll go ahead and
> make such a change to the ping sources.

How about instead having ping log the use of -s? That way you can catch a
naughty user once. :-)

Such choices should probably be site-selectable.

Take care,

Bill