From owner-freebsd-questions@FreeBSD.ORG Wed Aug 13 07:24:40 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4889737B401 for ; Wed, 13 Aug 2003 07:24:40 -0700 (PDT) Received: from cmailm4.svr.pol.co.uk (cmailm4.svr.pol.co.uk [195.92.193.211]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7348743FDF for ; Wed, 13 Aug 2003 07:24:39 -0700 (PDT) (envelope-from markie@notwentytwo.freeserve.co.uk) Received: from modem-2358.chimpanzee.dialup.pol.co.uk ([217.134.121.54] helo=ape) by cmailm4.svr.pol.co.uk with smtp (Exim 4.14) id 19mwYD-0004ah-GT; Wed, 13 Aug 2003 15:24:35 +0100 Message-ID: <001801c361a6$c78a7070$e400a8c0@ape> From: "Markie" To: "Mark" , "Andy Farkas" References: <20030813231812.O90272-100000@hewey.af.speednet.com.au> <200308131342.H7DDGEWG005511@asarian-host.net> Date: Wed, 13 Aug 2003 15:25:25 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 cc: Ruben de Groot cc: freebsd-questions@freebsd.org Subject: Re: Restricting ICMP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Aug 2003 14:24:40 -0000 lol. Must just be one of those days, eh? I can't get enough of them :o) ----- Original Message ----- From: "Mark" To: "Andy Farkas" ; "Markie" Cc: "Ruben de Groot" ; Sent: Wednesday, August 13, 2003 2:42 PM Subject: Re: Restricting ICMP > ----- Original Message ----- > From: "Andy Farkas" > To: "Markie" > Cc: "Mark" ; "Ruben de Groot" ; > > Sent: Wednesday, August 13, 2003 3:20 PM > Subject: Re: Restricting ICMP > > > > > Is it? I thought it was setuid root for a reason :o) > > .... > > > I just woke up, so it may well be I am just being stupid :o) > > > > Well, I didn't know ping needed suid. I stand corrected and > > apologise for any misleadings. > > > > /me is the stupid one... time to go to bed :) > > > If it makes you feel any better, I feel rather stupid too. :) Here I was, > thinking: "Hmm, chmod g+s, as means of allowing only folks in wheel access, > is not going to work;" whereas the glaringly obvious solution: to remove > execution-bits from "o" using chmod 4550, for some bizarre reason, escaped > me. :) > > /me, feeling stupid too. > > - Mark > >