Home page logo
/

nanog logo nanog mailing list archives

Re: SMURF amplifier block list
From: Ian McLaughlin <ian () okjunc junction net>
Date: Mon, 13 Apr 1998 09:32:54 -0700 (PDT)


Thank you for the heads-up.  The problem has now been fixed on our netowrk.

On Mon, 13 Apr 1998, Michael Dillon wrote:

On 13 Apr 1998, Michael Shields wrote:

Well, in the case of junction.net, there is no such forgery needed.

    ~$ host www.memra.com
    www.memra.com           A       199.166.227.56

I have just fired off a message to my ISP pointing him to the instructions
for "no ip directed broadcast" so it will hopefully be fixed soon.

And I'm Cc'ing his upstream provider who probably never thought of testing
all the ?.?.?.255 addresses in their network and contacting their
downstream customers to get directed broadcast turned off. For them I'm
including the URLs

http://www.quadrunner.com/~chuegen/smurf.cgi
ftp://ftp.isi.edu/in-notes/rfc2267.txt

I sure would hate to get cut off from sending mail to Karl. ;-)

--
Michael Dillon                   -               Internet & ISP Consulting
http://www.memra.com             -               E-mail: michael () memra com



  ___             __  __ __ _                 _    _ _
 |_ _|__ _ _ _   |  \/  / _| |  __ _ _ _ __ _| |_ | (_)_ _   Okanagan
  | |/ _` | ' \  | |\/| \__| |_/ _` | | / _` | ' \| | | ' \  Internet
 |___\__,_|_||_| |_|  |_|  |___\__,_|___\__, |_||_|_|_|_||_| Junction
             Network Operations Centre  |___/ Phone +1 (888) 944-INET



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]