Bugtraq: Solaris Ping DOS - Best solution?

[arager () MCGRAW-HILL COM (Anton T. Rager)]

     As some one posted earlier,  the current solution appears to be:


     > /usr/sbin/ndd -set /dev/ip ip_respond_to_echo_broadcast 0
     >
     > // should be added to /etc/init.d/inetinit to be permanent.

     This took care of the problem for me. [Solaris 2.5.1 on Sun Ultra
     1-140]  Thanks to all.

     Next question.  What other problems could disabling this ip_response
     param. cause?  Is it a good permanent solution for internet servers?



     Anton Rager
     arager () McGraw-Hill com