Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Filtering ICMP (Was Re: SMURF amplifier block list)

  • From: Michael Dillon
  • Date: Fri Apr 24 15:10:51 1998

On Thu, 23 Apr 1998, Jason Lixfeld wrote:

> Then how do you propose to effectively block smurf coming IN?  You are
> totally asking for it if you need to rely on your upstreams to protect
> you. 

You cannot block SMURF coming in. Once it has travelled down your DS3 to
your router it has already done damage to your connectivity. Only your
upstream can prevent the SMURF packets from coming down your DS3. The
solution for the victim is to work with their upstream to rapidly block
*AND* *TRACE* the perps.

--
Michael Dillon                   -               Internet & ISP Consulting
http://www.memra.com             -               E-mail: michael@memra.com






Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.