Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : ping: icmp open socket: Operation not permitted

[UnrealSilence]

ping: icmp open socket: Operation not permitted

I get that when using a network cgi tool I installed on my web page. I'm guessing APF firewall conflict?

How can I correct this?

[activelobby4u]

try this..should work

http://wiki.tuxedo-es.org/Lowering_p...ities_tutorial

[UnrealSilence]

That didn't work. Don't hav vsecurity installed and do not wish for it to conflict with everything else (Security)

[JTY]

Sounds like a firewall policy is blocking the ICMP packet.

[InstaCarma_Rose]

Disable APF firewall on the server if its installed and then try if it works.

$ service apf stop

Make sure that there are no rules in Iptables using

$ iptables -L

Regards,
Rose
rose@instacarma.com

[andren]

No idea what kind of server you have but *good* setups prevent users from using ping.

You need to set the suid bit to get around your problem, it has nothing to do with the firewall imho.

[Slidey]

what andren said - Operation not permitted is an OS thing, not a firewall problem (which would probably just drop the packet and put something in syslog)

Chances are your machine doesnt allow non-root users to open icmp sockets

[UnrealSilence]

Do you know of a work around? For example, i want to add some tools like the ones found on dnsstuff.com

[Slidey]

run:

ls -l /bin/ping

[andren]

Originally Posted by UnrealSilence

Do you know of a work around? For example, i want to add some tools like the ones found on dnsstuff.com

Afaik there is no workaround for the suid bit.
You can add tools like dnsstuff - but I wouldn't recommend it on a shared server.