[15354] in North American Network Operators' Group
Re: Smurfing
daemon@ATHENA.MIT.EDU (William Allen Simpson)
Fri Feb 13 21:30:04 1998
Date: Sat, 14 Feb 98 02:13:35 GMT
From: "William Allen Simpson" <wsimpson@greendragon.com>
To: nanog@merit.edu
Wow, I was glad to see that all these wonderful folks are reading the
router requirements (RFC-1812, June 1995). Good, good.
What I'd like to understand is how smurf attacks can work, even with
directed broadcast on? Isn't there a requirement (RFC-1122) from ages
past (October 1989) that ICMP not respond to broadcast or multicast
[page 38 et seq]?
What pressure is being put on host vendors?
Which host vendors are the problem?
WSimpson@UMich.edu
Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B 6A 15 2C 32
