From: Mike Calhoon (mcalhoon27@earthlink.net)
Date: Tue Oct 12 2004 - 01:41:14 GMT-3
Here is a link I found a while back...
http://www.cisco.com/warp/public/707/22.html
Mike
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
James
Sent: Monday, October 11, 2004 11:13 PM
To: John Matus
Cc: lab
Subject: Re: smurf attacks
On Mon, Oct 11, 2004 at 08:02:05PM -0700, John Matus wrote:
> how does one stop a smurf attack?
no ip directed-broadcast
Note that it won't really stop the attack per se, but will prevent your
network from being used as amplifier for the attack. smurf is rarely a
concern in real world today though since most router vendors disable
directed
broadcast by default.
What's real threat today are big big bot nets and spoofed addr floodings
that
can easily kill a GigE of internet transit.
HTH,
-J
-- James Jun TowardEX Technologies, Inc. Technical Lead Network Design, Consulting, IT Outsourcing james@towardex.com Boston-based Colocation & Bandwidth Services cell: 1(978)-394-2867 web: http://www.towardex.com , noc: www.twdx.net
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:46 GMT-3