nanog mailing list archives

Re: Smurf tone down


From: Dan Hollis <goemon () sasami anime net>
Date: Sat, 1 May 1999 00:21:05 -0700 (PDT)


On Sat, 1 May 1999, Joe Shaw wrote:
After dealing with UUNet security regarding several smurf incidents I
asked them this same question.  Their response (and I'm sure it would be
the same response of others) was that a lot of the routers on their
network couldn't handle the load of using CEF-CAR to limit smurf attacks.

The explanation I got from uunet regarding smurf attacks and why they
dont shut down their smurf amplifiers when notified repeatedly about
them, is that their ascend tnt's dont support icmp filtering.

-Dan




Current thread: