nanog mailing list archives
Re: Solution: Re: Huge smurf attack
From: Brett Frankenberger <brettf () netcom com>
Date: Wed, 13 Jan 1999 17:56:13 -0600 (CST)
:: Brandon Ross writes ::
Doing something like this, similar to the serveral suggestions to filter all .0 and .255 addresses, is an attempt to fix the symptom instead of the real problem.
So is forcing vendors to make the equivalent of "no ip directed-broadcast" the default. The problem is that dolts configure routers. The symptom is "ip directed-broadcast" is configured (or not unconfigured) where is shouldn't be. (For the record, I agree with you on blocking ICMPs and blocking .0/.255 ... both are bad ideas. But so is forcing vendors to violate the router requirements RFC. If we (the internet community) want directed broadcasts to be dropped by default, we should get off our collective duffs and change the RFC.) - Brett (brettf () netcom com) ------------------------------------------------------------------------------ ... Coming soon to a | Brett Frankenberger .sig near you ... a Humorous Quote ... | brettf () netcom com
Current thread:
- Re: Solution: Re: Huge smurf attack, (continued)
- Re: Solution: Re: Huge smurf attack Joe Shaw (Jan 14)
- Re: Solution: Re: Huge smurf attack Ray Everett-Church (Jan 14)
- Re: Solution: Re: Huge smurf attack Phil Howard (Jan 14)
- Re: Solution: Re: Huge smurf attack Daniel Senie (Jan 14)
- Re: Solution: Re: Huge smurf attack Phil Howard (Jan 14)
- Re: Solution: Re: Huge smurf attack Robbie Honerkamp (Jan 14)
- Re: Solution: Re: Huge smurf attack Dean Anderson (Jan 12)
- Re: Solution: Re: Huge smurf attack Dan Hollis (Jan 12)
- Re: Solution: Re: Huge smurf attack danderson (Jan 12)
- Re: Solution: Re: Huge smurf attack Brandon Ross (Jan 12)
- Re: Solution: Re: Huge smurf attack Brett Frankenberger (Jan 13)
- Re: Solution: Re: Huge smurf attack Daniel Senie (Jan 13)
- Re: Solution: Re: Huge smurf attack Brandon Ross (Jan 12)
- Re: Solution: Re: Huge smurf attack Brandon Ross (Jan 14)
- Re: Solution: Re: Huge smurf attack Steven J. Sobol (Jan 16)
- Re: Solution: Re: Huge smurf attack Steven J. Sobol (Jan 16)
- Re: Solution: Re: Huge smurf attack Alex P. Rudnev (Jan 16)