SMURF amplifier block list - READ THIS
Jay R. Ashworth
jra at scfn.thpl.lib.fl.us
Tue Apr 14 23:18:17 UTC 1998
On Tue, Apr 14, 1998 at 05:22:42PM -0500, Karl Denninger wrote:
> Uh, folks, blocking the broadcast address will NOT help you in the case
> of a smurf POUNDING ON YOU. It will ONLY prevent your customers launching
> a smurf against someone ELSE. A FAR more effective means of doing THAT is
> to prohibit source address forgery on your connections.
Um, Karl? That's not what we were talking about.
What we were talking about was forbidding external connections to the
class-C broadcast addresses on a net, and why that useful process made
addressing hosts on .255 boundaries A Bad Idea.
Cheers,
-- jra
--
Jay R. Ashworth jra at baylink.com
Member of the Technical Staff Unsolicited Commercial Emailers Sued
The Suncoast Freenet "Two words: Darth Doogie." -- Jason Colby,
Tampa Bay, Florida on alt.fan.heinlein +1 813 790 7592
Managing Editor, Top Of The Key sports e-zine ------------ http://www.totk.com
More information about the NANOG
mailing list