Re: [nsp] known networks for broadcast ping attacks

[Systems Engineer <snash () lightning net>]

Actually people are making it seem that the entire MAE is sending you an
echo.  No one is mounting an attack from there,  they are just making it
look like it is coming from there.


Alex.Bligh wrote:

> >       Here's a list of KNOWN NETWORKS that are being used to ping
> > flood other networks.  If one of your networks is in here, FILTER
> > BROADCAST PINGS NOW FROM ENTERING YOUR NETWORK.  YOUR NETWORK IS
> BEING
> > USED TO ATTACK OTHER NETWORKS.
>
> >       "204.71.177.255", "255.255.255.255", "207.137.200.255",
> "192.41.177.255",
>
> Urm, 192.41.177.255 is the MAE-East LAN ?! Are you saying attacks are
> being mounted from here or people are attacking this LAN (not
> sure which is more worrying)
>
> Alex Bligh
> Xara Networks



--
---     ---     ---     ---     ---     ---     ---     ---     ---
Steven Nash                             ph:  (516)248-8400ext25
Systems Engineer / Network Security    fax:  (516)248-8897
Lightning Internet Services LLC      email:  snash () lightning net
http://www.lightning.net
---     ---     ---     ---     ---     ---     ---     ---     ---