Denial of service attacks apparently from UUNET Netblocks

Wed Oct 8 13:11:13 UTC 1997

On Tue, Oct 07, 1997 at 09:03:15PM -0500, Brett Frankenberger wrote:
> :: Joe  Shaw writes ::
> > 
> > Although this is all true, it still doesn't explain the fact that UUNet is
> > allowing broadcast packets through their network.  One would think that
> > with the recent increase in broadcast DoS attacks, that UUNet would have
> > taken a much more proactive stance.  
> 
> 167.132.194.255 is not a broadcast address.
> 
> 167.132.2.15 is a broadcast address.
> 
> How would you expect UUNet to know that?
> 
>           - Brett  (brettf at netcom.com)

On the device which forwarded the packet(s) to the device which echoes them,
it *does* know.

--
-- 
Karl Denninger (karl at MCS.Net)| MCSNet - Serving Chicagoland and Wisconsin
http://www.mcs.net/~karl     | T1's from $600 monthly to FULL DS-3 Service
			     | NEW! K56Flex modem support is now available
Voice: [+1 312 803-MCS1 x219]| 56kbps DIGITAL ISDN DOV on analog lines!
Fax:   [+1 312 803-4929]     | 2 FULL DS-3 Internet links; 400Mbps B/W Internal