smurf's attack...

Wayne Bouchard web at
Sat Sep 6 02:52:40 UTC 1997

> Randy Bush writes...
> > > access-list XXX deny ip any
> > 
> > You must be kidding.  Why not
> > 
> > access-list XXX deny ip any
> I like...
> access-list XXX deny ip any

Okay... trying to access Oops..

The first example is okay if its "deny icmp" instead of "deny
ip". That still allows traffic to reach those hosts, just doesn't let
ICMP through.

Although 255 is a valid IP address, its use is, in my view,
limited. Denying ICMP packets to those hosts may be considered an
acceptable sacrafice by many.

Wayne Bouchard                             GlobalCenter
web at                           
Primenet Network Engineering               Internet Solutions for
(602) 416-6422   800-373-2499 x6422        Growing Businesses
FAX: (602) 416-9422          

More information about the NANOG mailing list