North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Denial of service attacks apparently from UUNET Netblocks

  • From: Jay R. Ashworth
  • Date: Tue Oct 07 16:31:14 1997 
On Tue, Oct 07, 1997 at 11:43:24AM -0700, ken emery wrote:
> One question, "can't the sender (aka the person initiating the call) 
> forge the ANI information?"  I know on a cisco (1003 series) it will 
> croak if this is incorrect, but what about an Ascend or other ISDN 
> device?  Unless things have changed I don't think the TELCO's in the 
> USA guarantee the ANI is correct.

In short: no.

It's exceptionally difficult to forge ANI, with one small exception.
_Some_ originating end-offices apparently don't validate ANI
information handed to them by PBXs...  otherwise, spoofing ANI requires
intercepting the loop to the receiving sub, or subverting the switch.

This was discussed at length in one of the telecom newsgroups, about 4
months ago, search for "ANI spoof" or "CNID spoof".

Cheers,
-- jra
-- 
Jay R. Ashworth                                                [email protected]
Member of the Technical Staff             Unsolicited Commercial Emailers Sued
The Suncoast Freenet      "People propose, science studies, technology
Tampa Bay, Florida          conforms."  -- Dr. Don Norman      +1 813 790 7592