Restricting ICMP

Markie markie at notwentytwo.freeserve.co.uk
Wed Aug 13 07:24:40 PDT 2003


lol. Must just be one of those days, eh? I can't get enough of them :o)

----- Original Message -----
From: "Mark" <admin at asarian-host.net>
To: "Andy Farkas" <andyf at speednet.com.au>; "Markie"
<markie at notwentytwo.freeserve.co.uk>
Cc: "Ruben de Groot" <mail23 at bzerk.org>; <freebsd-questions at freebsd.org>
Sent: Wednesday, August 13, 2003 2:42 PM
Subject: Re: Restricting ICMP


> ----- Original Message -----
> From: "Andy Farkas" <andyf at speednet.com.au>
> To: "Markie" <markie at notwentytwo.freeserve.co.uk>
> Cc: "Mark" <admin at asarian-host.net>; "Ruben de Groot" <mail23 at bzerk.org>;
> <freebsd-questions at freebsd.org>
> Sent: Wednesday, August 13, 2003 3:20 PM
> Subject: Re: Restricting ICMP
>
>
> > > Is it? I thought it was setuid root for a reason :o)
> > ....
> > > I just woke up, so it may well be I am just being stupid :o)
> >
> > Well, I didn't know ping needed suid. I stand corrected and
> > apologise for any misleadings.
> >
> > /me is the stupid one... time to go to bed :)
>
>
> If it makes you feel any better, I feel rather stupid too. :) Here I was,
> thinking: "Hmm, chmod g+s, as means of allowing only folks in wheel
access,
> is not going to work;" whereas the glaringly obvious solution: to remove
> execution-bits from "o" using chmod 4550, for some bizarre reason, escaped
> me. :)
>
> /me, feeling stupid too.
>
> - Mark
>
>



More information about the freebsd-questions mailing list