Router modifications to deal with smurf
Craig A. Huegen
chuegen at quadrunner.com
Sun Apr 26 22:35:29 UTC 1998
On Sat, 25 Apr 1998, Rusty Zickefoose wrote:
==> So, if someone, or possibly a group of someones, were to make the
==>following request to the various router vendors, would they be met with
==>approval by most of the readers?
==>
==> We requests that your routers be configurable, at the interface
==>level, to prevent the forwarding of an ICMP echo-request packet through an
==>interface that has a broadcast or wire address that matches the
==>destination address of that packet. We also request that the default
==>configurations of your routers be modified to prevent said forwarding.
This is against RFC 1812.
RFC 1812, "Requirements for IP Version 4 Routers", Section 5.3.5,
specifies:
---
A router MAY have an option to disable receiving network-prefix-
directed broadcasts on an interface and MUST have an option to
disable forwarding network-prefix-directed broadcasts. These options
MUST default to permit receiving and forwarding network-prefix-
directed broadcasts.
---
Someone has stated before that editor(s) of said RFC are aware of this and
have discussed the change in default.
Note that I'm not arguing that it *should* be the default, I'm just
arguing that vendors have implemented it this way because that's the way
they were told to in the RFC. If after reading
http://www.quadrunner.com/~chuegen/smurf.txt, you think that I believe
directed-broadcasts should be on by default, go back and read agian. =)
Now, since this has been beaten past the jelly stage, can we please put
the topic to sleep? Thank you.
/cah
More information about the NANOG
mailing list