smurf, the MCI-developed tracing tools (was Re: Bogus announcement)

Paul Ferguson ferguson at
Sun Dec 28 18:31:48 UTC 1997

At 12:05 PM 12/28/97 -0600, Karl Denninger wrote:

>You don't want to filter ICMPs.  What you want to filter is ANYTHING which
>came from an invalid source address *at your entrance* from your customer

This is documented in:

 Network Ingress Filtering: Defeating Denial of Service Attacks
  which employ IP Source Address Spoofing;

At the moment, we're trying to get this evntually published as
an Informational RFC.

More information can be found at:

- paul

More information about the NANOG mailing list