[11780] in North American Network Operators' Group
Re: [nsp] known networks for broadcast ping attacks
daemon@ATHENA.MIT.EDU (Sharif Torpis)
Tue Aug 12 15:03:41 1997
From: "Sharif Torpis" <storpis@pbi.net>
Date: Tue, 12 Aug 1997 11:49:53 -0700
In-Reply-To: Charles Sprickman <spork@inch.com>
"Re: [nsp] known networks for broadcast ping attacks" (Aug 12, 2:42am)
To: Charles Sprickman <spork@inch.com>, Jon Lewis <jlewis@inorganic5.fdt.net>
Cc: nanog@merit.edu
On Aug 12, 2:42am, Charles Sprickman wrote:
> Subject: Re: [nsp] known networks for broadcast ping attacks
>
> When I type "no ip source route" on a Cisco, what exactly is that doing
> for me? Is it just disallowing the router itself to generate
> source-routed packets or is it saying sink all source-routed packets?
> All this talk of spoofing is getting me a bit confused. What exactly is
> the difference between source-routing and spoofing?
>
> Just trying to understand a bit more,
Spoofing is forging a packet's source address. Source routing is including
information in the packet that tells the route the packet should take to get to
its destination.
See ftp://ftp.greatcircle.com/pub/firewalls/FAQ
--
Sharif Torpis (storpis@pbi.net)
Network Engineering
Pacific Bell Internet
PGP Key at http://www-swiss.ai.mit.edu/~bal/pks-toplev.html