Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Access to the Internic Blocked

  • From: John Hawkinson
  • Date: Thu Aug 22 01:58:00 1996

> >On itself, LSRR is a godsend to hackers (i can think of about
> >a dozen of very nasty attacks using general LSRR).  The only
> >useful application for it is traceroute.
> >
> >Why don't router vendors provide an option to turn it
> >off for everything but ICMP ECHO?
> 
> Personally I find this an excellent suggestion.

So now I need to hack my traceroute to send ICMP_ECHO_REQUESTS instead
of high-port udp packets?

Oh well, I guess we can put this right next to the patches to have
traceroute send TCP SYNs to get through stupid firewalls.

--jhawk
- - - - - - - - - - - - - - - - -




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.