[22577] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Solution: Re: Huge smurf attack

daemon@ATHENA.MIT.EDU (Steve Gibbard)
Tue Jan 12 13:47:06 1999

Date: Tue, 12 Jan 1999 13:11:09 -0500 (EST)
From: Steve Gibbard <scg@wwnet.net>
To: danderson@lycos.com
cc: nanog@merit.edu
In-Reply-To: <852566F7.005A0943.00@pghmta2.mis.pgh.lycos.com>

On Tue, 12 Jan 1999 danderson@lycos.com wrote:

> I'm not sure what the big issue here is with the smurf attacks. If you set
> up some kind of access list that disables incoming icmp traffic, then turn

That breaks path MTU discovery (see RFC 1435 for more info on that), among
other things.

-Steve

--
Steve Gibbard
WWNet System Administration
+1 734 513-7707 x 2009
http://www.wwnet.net


home help back first fref pref prev next nref lref last post