Re: Getting PING bombed...

["Craig A. Huegen" <chuegen () quadrunner com>]

On Sat, 18 Oct 1997, Jared Mauch wrote:

==>     The warning of doing this is be sure you're running code that 
==>doesn't generate icmp administrativeley prohibited messages for each packet
==>denied, else that will melt down your router cpu

For a Cisco, the only release this "fast drop" code is currently in is
11.1CA, release 11.1(13.5)CA and later.  It is currently not in 11.2, but
is being worked on.

See http://www.quadrunner.com/~chuegen/smurf.txt for more information
regarding filtering/tracing capabilities (and information about "smurf"
attacks). 

/cah