nanog mailing list archives
Re: Solution: Re: Huge smurf attack
From: Brandon Ross <bross () mindspring net>
Date: Wed, 13 Jan 1999 02:29:41 -0500 (EST)
On Tue, 12 Jan 1999 danderson () lycos com wrote:
Only I'm allowing the echo-reply so I can ping/traceroute out for my troubleshooting needs. However, I don't buy the 'it breaks testing methods' because there are other ways to test that using icmp for incoming stuff.
Yes, but, do you have any idea how many tech support calls would be generated by our customers complaining that they can't ping or be pinged? Our service is advertised as unrestricted Internet access. Our customers rightfully expect to be able to ping out as well as be pinged. If we blocked all echo throughout our network, we would be completed flooded with technical support calls. Doing something like this, similar to the serveral suggestions to filter all .0 and .255 addresses, is an attempt to fix the symptom instead of the real problem.
Plus, you STILL have directed broadcasts turned off in my scenario so the access list is almost futile.
Of course. Brandon Ross Network Engineering 404-815-0770 800-719-4664 Director, Network Engineering, MindSpring Ent., Inc. info () mindspring com ICQ: 2269442 Stop Smurf attacks! Configure your router interfaces to block directed broadcasts. See http://www.quadrunner.com/~chuegen/smurf.cgi for details.
Current thread:
- Re: Solution: Re: Huge smurf attack, (continued)
- Re: Solution: Re: Huge smurf attack Phil Howard (Jan 15)
- Re: Solution: Re: Huge smurf attack Joe Shaw (Jan 14)
- Re: Solution: Re: Huge smurf attack Ray Everett-Church (Jan 14)
- Re: Solution: Re: Huge smurf attack Phil Howard (Jan 14)
- Re: Solution: Re: Huge smurf attack Daniel Senie (Jan 14)
- Re: Solution: Re: Huge smurf attack Phil Howard (Jan 14)
- Re: Solution: Re: Huge smurf attack Robbie Honerkamp (Jan 14)
- Re: Solution: Re: Huge smurf attack Dean Anderson (Jan 12)
- Re: Solution: Re: Huge smurf attack Dan Hollis (Jan 12)
- Re: Solution: Re: Huge smurf attack danderson (Jan 12)
- Re: Solution: Re: Huge smurf attack Brandon Ross (Jan 12)
- Re: Solution: Re: Huge smurf attack Brett Frankenberger (Jan 13)
- Re: Solution: Re: Huge smurf attack Daniel Senie (Jan 13)
- Re: Solution: Re: Huge smurf attack Brandon Ross (Jan 12)
- Re: Solution: Re: Huge smurf attack Brandon Ross (Jan 14)
- Re: Solution: Re: Huge smurf attack Steven J. Sobol (Jan 16)
- Re: Solution: Re: Huge smurf attack Steven J. Sobol (Jan 16)
- Re: Solution: Re: Huge smurf attack Alex P. Rudnev (Jan 16)