|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Solution: Re: Huge smurf attack
:: Brandon Ross writes ::
>
> Doing something like this, similar to the serveral suggestions to
> filter all .0 and .255 addresses, is an attempt to fix the symptom
> instead of the real problem.
So is forcing vendors to make the equivalent of "no ip
directed-broadcast" the default. The problem is that dolts configure
routers. The symptom is "ip directed-broadcast" is configured (or not
unconfigured) where is shouldn't be.
(For the record, I agree with you on blocking ICMPs and blocking
.0/.255 ... both are bad ideas. But so is forcing vendors to violate
the router requirements RFC. If we (the internet community) want
directed broadcasts to be dropped by default, we should get off our
collective duffs and change the RFC.)
- Brett ([email protected])
------------------------------------------------------------------------------
... Coming soon to a | Brett Frankenberger
.sig near you ... a Humorous Quote ... | [email protected]
|