nanog mailing list archives

Re: [nsp] known networks for broadcast ping attacks


From: shields () crosslink net (Michael Shields)
Date: 30 Jul 1997 20:56:51 +0000

"Jay R. Ashworth" <jra () scfn thpl lib fl us> writes:
Ought IP stack implementations not to refuse to reply to ECHO_REQUEST
packets with destination address which are broadcast addresses?

Apparently some management packages search out hosts using broadcast
pings.  Not the best decision IMO.

This was discussed a couple of days ago on bugtraq and I posted a
Linux patch to cause it not to answer broadcast pings.

*** How do you configure your router for that?  no ip directed-broadcast.
-- 
Shields, CrossLink.


Current thread: