nanog mailing list archives

Re: New IPv4 Allocation to ARIN


From: Pete Templin <petelists () templin org>
Date: Sun, 18 Jan 2004 07:29:33 -0600



Petri Helenius wrote:

jlewis () lewis org wrote:

It's those dang Nachi-sized ICMP echo/echo-replies. We block those at all our transit points and dial-up ports. Nachi was killing our cisco access-servers until we did this to stop the spread.

I know what they are and how to get around them. I just look down on people
dropping my packets in their backbones without reason.

He has a reason: that virus was melting down his network (and was melting down lots of networks).

If viruses came with instructions, documentation, and source code, we could all rest assured that it did completely self-destruct this month. Instead, we're all watching in wait, and leaving filters handy or in place.

(I'd mention the Nachi filtering I had to do and the implications of how I had to do it based on the platform I'm using, but my flamesuit is all tattered just trying to find a safe tool to read my mail.)

pt


Current thread: