[plug] Packets per second

[Leon Brooks]

Christian wrote:
>> Students have *lots* of time on their hands. Run everything chrooted,
>> throw away telnet and install OpenSSH, make free use of chattr +i and
>> restrictive mounts (ro, nosuid, noexec, nodev), switch off any service
>> not actually necessary.

> Good advice except chattr is next to useless...

It certainly shoves a stick into the spokes of almost any "blind"
attack, and if you also remove the chattr binary (run it from floppy or
whatever), it trips up quite a few, uh "sighted"(?) attacks as well.

> *longs for capabilities*

Now available (32 of them, anyway) in the latest 2.3 kernel.