Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: SMURF amplifier block list

  • From: Mark Milhollan
  • Date: Wed Apr 15 00:14:30 1998

Stephen Sprunk writes:
>If you have a suggestion for "removing the attack possibility in its
>entirety," please tell us.  So far, nobody's come up with one.

SMURF'ing depends on spoofed source addresses, so the appropriate
filter is customer (and if your can afford it peer) ingress, not
network egress.

Anyone willing to install a *.255 filter should instead eliminate
directed-broadcast response, and validate packets they will accept.




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.