From owner-freebsd-security  Wed May 27 09:26:16 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id JAA02914
          for freebsd-security-outgoing; Wed, 27 May 1998 09:26:16 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from passer.osg.gov.bc.ca (passer.osg.gov.bc.ca [142.32.110.29])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA02868
          for <freebsd-security@freebsd.org>; Wed, 27 May 1998 09:26:04 -0700 (PDT)
          (envelope-from cschuber@passer.osg.gov.bc.ca)
Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.9.0/8.6.10) id JAA05578; Wed, 27 May 1998 09:23:39 -0700 (PDT)
Message-Id: <199805271623.JAA05578@passer.osg.gov.bc.ca>
Received: from localhost(127.0.0.1), claiming to be "passer.osg.gov.bc.ca"
 via SMTP by localhost, id smtpdaagela; Wed May 27 09:23:31 1998
X-Mailer: exmh version 2.0gamma 1/27/96
Reply-to: Cy Schubert - ITSD Open Systems Group <cschuber@uumail.gov.bc.ca>
X-Sender: cschuber
To: Bart Smit <bit@signature.nl>
cc: "J.A. Terranson" <sysadmin@mfn.org>,
        "'FreeBSD Security'" <freebsd-security@FreeBSD.ORG>
Subject: Re: SMURF in 2.2.5 
In-reply-to: Your message of "Wed, 27 May 1998 10:50:05 +0200."
             <Pine.BSF.3.96.980527104739.29546A-100000@pollux.or.signature.nl> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 27 May 1998 09:22:50 -0700
From: Cy Schubert - ITSD Open Systems Group <cschuber@uumail.gov.bc.ca>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk

> 
> On Wed, 27 May 1998, J.A. Terranson wrote:
> 
> > I will not report this to bugtraq untill you guys tell me there's
> > a patch...
> 
> Well,  sysctl -w net.inet.icmp.bmcastecho=0  does not help, contrary to
> what you'd expect from the advisory...

What about ipfw?  For example, where 123.123.123.0 is your network 
address,

ipfw add deny icmp from 123.123.123.0 to any
ipfw add deny icmp from 123.123.123.255 to any

or better yet (which will help stop a fraggle attack),

ipfw add deny all from 123.123.123.0 to any
ipfw add deny all from 123.123.123.255 to any

Any thoughts anyone?

> 
> --Bart
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe security" in the body of the message



Regards,                       Phone:  (250)387-8437
Cy Schubert                      Fax:  (250)387-5766
Open Systems Group          Internet:  cschuber@uumail.gov.bc.ca
ITSD                                   Cy.Schubert@gems8.gov.bc.ca
Government of BC            
                                       



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message