[11481] in North American Network Operators' Group
Re: [nsp] known networks for broadcast ping attacks
daemon@ATHENA.MIT.EDU (Systems Engineer)
Wed Jul 30 17:03:07 1997
Date: Wed, 30 Jul 1997 16:21:46 -0400
From: Systems Engineer <snash@lightning.net>
To: "Alex.Bligh" <amb@xara.net>, nanog@merit.edu
Actually people are making it seem that the entire MAE is sending you an
echo. No one is mounting an attack from there, they are just making it
look like it is coming from there.
Alex.Bligh wrote:
> > Here's a list of KNOWN NETWORKS that are being used to ping
> > flood other networks. If one of your networks is in here, FILTER
> > BROADCAST PINGS NOW FROM ENTERING YOUR NETWORK. YOUR NETWORK IS
> BEING
> > USED TO ATTACK OTHER NETWORKS.
>
> > "204.71.177.255", "255.255.255.255", "207.137.200.255",
> "192.41.177.255",
>
> Urm, 192.41.177.255 is the MAE-East LAN ?! Are you saying attacks are
> being mounted from here or people are attacking this LAN (not
> sure which is more worrying)
>
> Alex Bligh
> Xara Networks
--
--- --- --- --- --- --- --- --- ---
Steven Nash ph: (516)248-8400ext25
Systems Engineer / Network Security fax: (516)248-8897
Lightning Internet Services LLC email: snash@lightning.net
http://www.lightning.net
--- --- --- --- --- --- --- --- ---
