North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Getting PING bombed...

  • From: Craig A. Huegen
  • Date: Sat Oct 18 16:13:50 1997 
On Sat, 18 Oct 1997, Jared Mauch wrote:

==>	The warning of doing this is be sure you're running code that 
==>doesn't generate icmp administrativeley prohibited messages for each packet
==>denied, else that will melt down your router cpu

For a Cisco, the only release this "fast drop" code is currently in is
11.1CA, release 11.1(13.5)CA and later.  It is currently not in 11.2, but
is being worked on.

See http://www.quadrunner.com/~chuegen/smurf.txt for more information
regarding filtering/tracing capabilities (and information about "smurf"
attacks). 

/cah