nanog mailing list archives
Re: SMURF amplifier block list
From: Dean Anderson <dean () av8 com>
Date: Fri, 17 Apr 1998 18:09:08 -0400
Does no ip directed broadcast really work?
Yes. It works. And it works for whatever your particular netmask or broadcast address happens to be, which is what's important. The only time you shouldn't do it globally is when some other network really needs to see broadcasts. For example, If we manage a client's network with HP OpenView over the internet, we need to be able to send them directed broadcasts, so that OpenView host discovery will work. Patrol works the same way, as do other products. In this case you can't use the "no ip directed broadcast" switch, but you can still set up access rules which do the same thing except for the permitted network. Bottom line is that you should protect your network from people who would either abuse it via smurfing, or simply have no business looking for hosts on your network. You have the tools to do it. --Dean ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean () av8 com LAN/WAN/UNIX/NT/TCPIP/DCE http://www.av8.com We Make IT Fly! (617)242-3091 x246 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Current thread:
- Re: SMURF amplifier block list, (continued)
- Re: SMURF amplifier block list Pete Ashdown (Apr 15)
- Re: SMURF amplifier block list Joe Shaw (Apr 15)
- Re: SMURF amplifier block list Brandon Ross (Apr 15)
- Message not available
- Re: SMURF amplifier block list Jay R. Ashworth (Apr 14)
- Re: SMURF amplifier block list Charley Kline (Apr 14)
- Message not available
- Re: SMURF amplifier block list Jay R. Ashworth (Apr 14)
- Re: SMURF amplifier block list John Hawkinson (Apr 14)
- Re: SMURF amplifier block list Randy Bush (Apr 14)
- Re: SMURF amplifier block list Stephen Sprunk (Apr 14)
- Re: SMURF amplifier block list jlixfeld (Apr 17)
- Re: SMURF amplifier block list Dean Anderson (Apr 17)
- Re: SMURF amplifier block list Al Reuben (Apr 17)
- Re: SMURF amplifier block list Alex P. Rudnev (Apr 18)
- Re: SMURF amplifier block list Dan Boehlke (Apr 18)
- Re: SMURF amplifier block list Dean Anderson (Apr 18)
- Re: SMURF amplifier block list Alex P. Rudnev (Apr 18)
- Re: SMURF amplifier block list Dan Boehlke (Apr 18)
- Re: SMURF amplifier block list Jeremiah Kristal (Apr 19)
- Re: SMURF amplifier block list Brandon Ross (Apr 20)
- Re: SMURF amplifier block list Dean Anderson (Apr 20)
- Re: SMURF amplifier block list Dave Andersen (Apr 20)