2014-11-27 18:19:41 +0100, Marco d'Itri: > On Nov 27, Stephane Chazelas <stephane.chaze...@gmail.com> wrote: > > > As a hardening feature, would it make sense for the "echo" > > service not to answer requests if they come with identical > > source and destination port? Maybe worth adding a note in the > > manual that the echo UDP service can be used in various attacks > > as well. > Welcome to the '90s. [...]
I know. Yet, that "builtin" service is still there in the 2014 implementations of inetd and people ask about them: http://unix.stackexchange.com/q/170066/22565 -- Stephane
