Re: Huge smurf attack

[Phil Howard <phil () whistler intur net>]

Christopher X. Candreva wrote:

> Maybe the person who was attacked from that address can do a trace to it ?
> Obviously THEY have a route to it.

No, you don't have to have a route (back) to A.B.C.D to have a packet
arrive with a source address of A.B.C.D.  It might be nice if that were
the case in every router, but smurf can be effective just because this
is _not_ the case (as applies to the originating echo requests).

-- 
 --    *-----------------------------*      Phil Howard KA9WGN       *    --
  --   | Inturnet, Inc.              | Director of Internet Services |   --
   --  | Business Internet Solutions |       eng at intur.net        |  --
    -- *-----------------------------*      philh at intur.net       * --