From owner-freebsd-questions@FreeBSD.ORG  Thu Jul  3 14:04:05 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 112F437B401
	for <freebsd-questions@freebsd.org>;
	Thu,  3 Jul 2003 14:04:05 -0700 (PDT)
Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8A1ED43FF7
	for <freebsd-questions@freebsd.org>;
	Thu,  3 Jul 2003 14:04:02 -0700 (PDT)
	(envelope-from freebsduser@comcast.net)
Received: from comcast.net
	(12-225-141-88.client.attbi.com[12.225.141.88](untrusted sender))
	by comcast.net (rwcrmhc11) with SMTP
	id <2003070321040001300h9q5re>          (Authid: animotions);
	Thu, 3 Jul 2003 21:04:00 +0000
Message-ID: <3F049A3D.3040104@comcast.net>
Date: Thu, 03 Jul 2003 14:03:57 -0700
From: K Anderson <freebsduser@comcast.net>
User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US;
	rv:1.0.1) Gecko/20020823 Netscape/7.0
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Nucking Futs <nuckingfutsto@hotmail.com>
References: <Law11-F108KHs7c6NdD00055715@hotmail.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Disable PING command
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Jul 2003 21:04:05 -0000



Nucking Futs wrote:
> How would I go about disabling users command to ping?  If need be I 
> would be willing to just disable the ping command altogether as a last 
> resort.
<Adverspam removed>
Good luck. All it takes is a user to port, transfere, compile, copy, 
move or hack in a ping command of their own. Any languages could be 
used, PERL, PHP, Python and much more.

Your other option is to administratively block any and all traffic that 
might be created via the ping command so that it just gets dropped by 
the firewall. Of course there might be other ways around that too.

HTH and good luck.