nanog mailing list archives
Re: SMURF amplifier block list
From: jlixfeld () idirect ca
Date: Sun, 19 Apr 1998 18:48:32 -0400 (EDT)
Cisco has a method of tracing SMuRF, do they not? Anyone know how they do it?! Is it some imbedded thing, or do they call the owners of each network and pray that they have Ciscos? On Sat, 18 Apr 1998, Alex P. Rudnev wrote: :> What about people who didn't subnet their class B on the eight bit :> boundry, but made larger subnets instead? What about the class B that :> doesn't appear to be subnetted at all? What about supernetted class C :> networks? A trailing .255 can be a valid host. :And what's worng? If they di nit subnet their B network, the tail of :address should be .255 too. : :If someone have particular .255 host - OK, you should not be able to ping :it, not more. The small fee for the free-of-smurfing-from-your-network. : :> > Why don't use the filter :> > :> > deny icmp any 0.0.0.255 255.255.255.0 echo-request :Just now, USA's ISP seems to be absolutely helpless facing SMURF. A lot :of networks do not block aroadcast echo-request's; no one even know how :to trace thos 'echo-request' packets by their network... may be I am :wrong, and it's because there is _a lot of ISP_ there, and even a few af :them who do not know how to fight against SMURF compose a good backet - I :do not know. : :Really; does anyone know any sucsessfull attempts to search for the :smurfer? What penalty was provided for this hackers? Does exist some :legitimate way to establish a lawsuite against them (when they'll be :located - last is the only matter of qualification for their nearest ISP, :not more). : : -- Regards, Jason A. Lixfeld jlixfeld () idirect ca iDirect Network Operations jlixfeld () torontointernetxchange net --------------------------------------------------------------------- TUCOWS Interactive Ltd. o/a | "A Different Kind of Internet Company" Internet Direct Canada Inc. | "FREE BANDWIDTH for Toronto Area IAPs" 5415 Dundas Street West | http://www.torontointernetxchange.net Suite 301, Toronto Ontario | (416) 236-5806 (T) M9B-1B5 CANADA | (416) 236-5804 (F) ---------------------------------------------------------------------
Current thread:
- Re: SMURF amplifier block list, (continued)
- Re: SMURF amplifier block list Dean Anderson (Apr 18)
- Re: SMURF amplifier block list Alex P. Rudnev (Apr 18)
- Re: SMURF amplifier block list Dan Boehlke (Apr 18)
- Re: SMURF amplifier block list Jeremiah Kristal (Apr 19)
- Re: SMURF amplifier block list Brandon Ross (Apr 20)
- Re: SMURF amplifier block list Dean Anderson (Apr 20)
- Re: SMURF amplifier block list Dave Andersen (Apr 20)
- Re: SMURF amplifier block list Jeremy Porter (Apr 20)
- Re: SMURF amplifier block list Brandon Ross (Apr 22)
- Re: SMURF amplifier block list Jason Lixfeld (Apr 24)
- Re: SMURF amplifier block list jlixfeld (Apr 20)
- Re: SMURF amplifier block list Alex P. Rudnev (Apr 20)
- Spoofed Packet Tracker (Was Re: SMURF amplifier block list) Jared Mauch (Apr 20)
- Message not available
- Re: SMURF amplifier block list Jay R. Ashworth (Apr 19)
- Re: SMURF amplifier block list jlixfeld (Apr 20)
- Re: SMURF amplifier block list Dean Anderson (Apr 18)
- Re: SMURF amplifier block list Alex P. Rudnev (Apr 18)
- Re: SMURF amplifier block list Dean Anderson (Apr 18)
- Re: SMURF amplifier block list Alex P. Rudnev (Apr 18)
- Re: SMURF amplifier block list Dean Anderson (Apr 18)
- Re: SMURF amplifier block list jlixfeld (Apr 20)