[16527] in North American Network Operators' Group
Re: SMURF AMPLIFIER BLOCK LIST -- VERY LARGE!!!!!!!!!!!!!!!
daemon@ATHENA.MIT.EDU (Phillip Vandry)
Thu Apr 30 11:19:03 1998
From: Phillip Vandry <vandry@Mlink.NET>
To: CMartin@mercury.balink.com (Martin Christian)
Date: Thu, 30 Apr 1998 11:08:43 -0400 (EDT)
Cc: nanog@merit.edu
In-Reply-To: <c=US%a=_%p=BAIS%l=MERCURY-980430001157Z-347@mercury.balink.com> from "Martin, Christian" at Apr 29, 98 08:11:57 pm
Martin, Christian Wrote:
> All,
>
> Here is my contribution to the block list. The script that generated
> this will follow. It is 'public domain', in that it can be modified,
> BUT, please give credit where credit is due!
>
> !!!!!NOTE: This script assumes that the offending bounce sites are /24
[...]
> 205.236.182.0
That is mine.
Every router on there has had directed broadcasts disabled for a long time.
Only that network is a /25, so the broadcast address we are talking about
is 205.236.182.127.
It turns out that not only does 205.236.182.255 unexpectedly function as
an alternate broadcast address for this network, but it is unaffected by
no ip directed-broadcast!!!
This sounds like two bugs in one.
(and I performed a hack to fix this network, but I shouldn't have had to
do this)
-Phil
