The Danger of Demo Accounts

[anto]

Recently our servers have experiencing DDOS Attacks. After further
investigation, it appears that the attacks came from CPanel Demo Accounts (all
have static IPs).

So, I'm calling for other CPanel based web hostings to review their policy on
giving a demo account to their visitors. Your demo account could be the next
place for irresponsible people to attack other servers.

Thanks.

 

[feanor]

a) don't let the demo account have a shell.
b) set the disk quota to 5 megs
c) don't let them have CGI
d) manually set everything to not have executable permissions (and make sure that is unchangeable)
e) set a bandwidth cap of 10 megs.