I was thinking of writing a program which trapped ping requests,
prompted the user (who would have to have superuser privs, of
course) if they want to allow pings from the requesting host,
and then respond if allowed and add the host to the "allowed
hosts" list for future reference.
Has this been done before?
What is the best way to do this? IINM, ping replies are
handled by the kernel. Is there a way to keep the kernel from
getting ping requests?
What is the best way of forwarding requests along to the normal
handler if we decide to let it through?
Will this require a kernel change, or can I do this all in userspace?
Thanks!
~Patrick