[11759] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [nsp] known networks for broadcast ping attacks

daemon@ATHENA.MIT.EDU (Charles Sprickman)
Tue Aug 12 02:56:22 1997

Date: Tue, 12 Aug 1997 02:42:21 -0400 (EDT)
From: Charles Sprickman <spork@inch.com>
To: Jon Lewis <jlewis@inorganic5.fdt.net>
cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.3.95.970812012933.600N-100000@inorganic5.fdt.net>


On Tue, 12 Aug 1997, Jon Lewis wrote:

> This may be true, but what's to stop the writers of smurf and the other
> programs from distributing version 2 with all new network addresses?
> Fixing the 119 networks used to attack FDT will help, but I doubt it will
> solve the problem.
> 
When I type "no ip source route" on a Cisco, what exactly is that doing
for me?  Is it just disallowing the router itself to generate
source-routed packets or is it saying sink all source-routed packets?
All this talk of spoofing is getting me a bit confused.  What exactly is
the difference between source-routing and spoofing?

Just trying to understand a bit more,

Charles


~~~~~~~~~					~~~~~~~~~~~
Charles Sprickman 				Internet Channel
INCH System Administration Team			(212)243-5200
spork@inch.com					access@inch.com



home help back first fref pref prev next nref lref last post