Date: Tue, 4 May 1999 17:44:52 -0700 (PDT) From: Dan Busarow <dan@dpcsys.com> To: Doug White <dwhite@resnet.uoregon.edu> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ICMP-attack Message-ID: <Pine.BSF.3.96.990504174230.9656G-100000@java.dpcsys.com> In-Reply-To: <Pine.BSF.4.03.9905041506020.28350-100000@resnet.uoregon.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 4 May 1999, Doug White wrote: > On Mon, 3 May 1999, Pat Lynch wrote: > > DOug, that actually won't work, the only way to make smurfs useless is to > > get enough bandwidth to handle the attack, or have your upstream filter > > for you, the only thing thios solves is DoS on the local net, but any > > communication in or out the gateway is still going to be impossible. > > Er? If you filter ICMP at your router, the pings (or whatever) can't > reach their intended target. Their intended target is your entire network. The goal of a smurfer is to generate so many echo replies that they fill your pipe. It's too late to do anything on your own router, well it will keep your LAN working but your Internet connection is just as hosed. Dan -- Dan Busarow 949 443 4172 Dana Point Communications, Inc. dan@dpcsys.com Dana Point, California 83 09 EF 59 E0 11 89 B4 8D 09 DB FD E1 DD 0C 82 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.990504174230.9656G-100000>