[22029] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: identify hostname

daemon@ATHENA.MIT.EDU (Roeland M.J. Meyer)
Thu Dec 3 03:52:45 1998

Date: Thu, 03 Dec 1998 00:23:02 -0800
To: Pete Kruckenberg <pete@kruckenberg.com>
From: "Roeland M.J. Meyer" <rmeyer@mhsc.com>
Cc: nanog@merit.edu
In-Reply-To: <Pine.BSI.3.95.981202110311.13790C-100000@inquo.net>

At 11:32 AM 12/2/98 -0700, Pete Kruckenberg wrote:
>> I do have an access list deny for incoming destinations to *.*.*.255
>> since I do know that the only customer we have with larger than a /24
>> from us (via cw.net) also happens to have nothing larger than /26 in
>> their network.  AFAIK, today, smurfers are only using *.*.*.255.  They
>> would have to track a lot more information to use others, so for now I
>> can generally expect that deny to prevent us from being an amplifier. 
>
>It's not difficult to find subnet broadcast addresses, since few routers
>(if they even support it) are configured to filter ICMP replies. If there
>isn't already software out there, it will take all of a few hours to add
>broadcast-finding code to the smurfing software in existence.

Guys,

Why not make your down-stream fill out a *complete* IN-ADDR.ARPA file which
lists their sub-net bcast and base addresses? That way yo could use the DNS
system itself to find those addresses.
___________________________________________________ 
Roeland M.J. Meyer, ISOC (InterNIC RM993) 
e-mail: <mailto:rmeyer@mhsc.com>rmeyer@mhsc.com
Internet phone: hawk.mhsc.com
Personal web pages: staff<http://www.mhsc.com/~rmeyer>.mhsc.com/~rmeyer
Company web-site: <http://www.mhsc.com/>www.mhsc.com
___________________________________________________ 
Who is John Galt?
"Atlas Shrugged" - Ayn Rand


home help back first fref pref prev next nref lref last post