Subject: Re: ping floods
To: None <firstname.lastname@example.org>
From: Bill Studenmund <email@example.com>
Date: 03/24/1997 09:50:59
> On Mon, 24 Mar 1997 01:56:51 +0000
> Nick Loman <firstname.lastname@example.org> wrote:
> > I'm getting fed-up of my users doing ping floods (ping -s 8000 host)
> > whenever they encounter a lame user on IRC. Can anyone suggest a way of
> > keeping ping ability available to users without them being able to run
> > commands like this which will soak up all my bandwidth uselessly?
> My first inclination would be to restrict the "-s size" option to
> the superuser, the same way "-f" is... and, basically, for the same
> reason :-)
> If folks think this is generally a good idea, I'll go ahead and
> make such a change to the ping sources.
How about instead having ping log the use of -s? That way you can catch a
naughty user once. :-)
Such choices should probably be site-selectable.