nanog mailing list archives

Re: smurf amp nets


From: Michael Dillon <michael () memra com>
Date: Fri, 12 Jun 1998 23:45:16 -0700 (PDT)

On Sat, 13 Jun 1998, Jon Lewis wrote:

I should probably have trimmed all nets responding with fewer than 2 IPs
since even a cisco with "no ip directed-broadcast" will generally respond
with a source ip of the interface on which the echo request arrived. 

Exactly! And folks who are supernetting adjacent /24s into a single /23
could be using the .255 address as a host address. 

BTW...I have a theory for a way to get all or most of the big smurf amp
networks fixed real fast...but doing it would probably get me in big
trouble. 

Just find the amplifier nets and post their addresses here. Let someone
else get in big trouble. The net result will be roughly the same. You do
realize that 3l33t KrAkKeR d00dz monitor this list, don't you?

--
Michael Dillon                 -               Internet & ISP Consulting
Memra Communications Inc.      -               E-mail: michael () memra com
http://www.memra.com           -  *check out the new name & new website*




Current thread: