Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: smurf amp nets

  • From: Craig A. Huegen
  • Date: Sat Jun 13 15:16:50 1998

On Sat, Jun 13, 1998 at 09:19:13AM -0700, ken emery wrote:

==>Solaris also has this ability.  You need to use /usr/sbin/ndd utility to 
==>turn this off.  The RFC's say that responding to directed broadcast should 
==>be on (this has been hashed out here before) so the *nix vendors leave it 
==>enabled in the default config.

This is incorrect.  The RFC (1122, section 3.2.2.6), states:

---
   An ICMP Echo Request destined to an IP broadcast or IP
   multicast address MAY be silently discarded.

   DISCUSSION:
      This neutral provision results from a passionate debate
      between those who feel that ICMP Echo to a broadcast
      address provides a valuable diagnostic capability and
      those who feel that misuse of this feature can too
      easily create packet storms.
---

There is no SHOULD in there.

www.quadrunner.com/~chuegen/smurf.txt has a few OS vendors who have
either turned replies off by default or have provided an option.

/cah





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.