Router modifications to deal with smurf
karl at mcs.net
Mon Apr 27 00:26:53 UTC 1998
Lucent/Livingston has pointedly ignored just this RFE request for over a year.
Karl Denninger (karl at MCS.Net)| MCSNet - Serving Chicagoland and Wisconsin
http://www.mcs.net/ | T1's from $600 monthly / All Lines K56Flex/DOV
| NEW! Corporate ISDN Prices dropped by up to 50%!
Voice: [+1 312 803-MCS1 x219]| EXCLUSIVE NEW FEATURE ON ALL PERSONAL ACCOUNTS
Fax: [+1 312 803-4929] | *SPAMBLOCK* Technology now included at no cost
On Sat, Apr 25, 1998 at 05:29:02PM -0400, Rusty Zickefoose wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Fun with my mailor, let me try this again.
> So, if someone, or possibly a group of someones, were to make the
> following request to the various router vendors, would they be met with
> approval by most of the readers?
> We requests that your routers be configurable, at the interface
> level, to prevent the forwarding of an ICMP echo-request packet through an
> interface that has a broadcast or wire address that matches the
> destination address of that packet. We also request that the default
> configurations of your routers be modified to prevent said forwarding.
> We request that your routers be configurable, both globally and
> and the interface level, with the interface configuration overiding the
> global configuration, to prevent the forwarding of an IP packet with a
> source network address different from the network address of the interface
> on which it was received. We also request that the default configurations
> of your routers be modified to prevent, globally, said forwarding.
> - --
> Rusty Zickefoose | The most exciting phrase to hear in science,
> rusty at mci.net | the one that heralds new discoveries, is not
> | "Eureka!", but "That's funny ..."
> | -- Isaac Asimov
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
> -----END PGP SIGNATURE-----
More information about the NANOG