Home page logo

nanog logo nanog mailing list archives

Re: [nsp] known networks for broadcast ping attacks
From: "Jay R. Ashworth" <jra () scfn thpl lib fl us>
Date: Wed, 30 Jul 1997 16:39:31 -0400

On Wed, Jul 30, 1997 at 04:03:04PM -0400, Netstat Webmaster wrote:
On Wed, 30 Jul 1997, Jay R. Ashworth wrote:
What he's saying is that someone is mounting broadcast ping flooding
attacks with forged source addresses which make them appear to be
coming from MAE-East, among other places.

mmmm... no.  The forged source address is that of the victim.  The listed 
broadcast addresses are the destinations of the packets with the forged 
address of the victim.  The broadcast addresses are never forged.



In any event, such filtering on the part of IAP's will solve the
problem, mostly.

-- jra
Jay R. Ashworth                                                jra () baylink com
Member of the Technical Staff             Unsolicited Commercial Emailers Sued
The Suncoast Freenet      "People propose, science studies, technology
Tampa Bay, Florida          conforms."  -- Dr. Don Norman      +1 813 790 7592

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]