Smurfing

Sat Feb 14 02:13:35 UTC 1998

Wow, I was glad to see that all these wonderful folks are reading the
router requirements (RFC-1812, June 1995).  Good, good.

What I'd like to understand is how smurf attacks can work, even with
directed broadcast on?  Isn't there a requirement (RFC-1122) from ages
past (October 1989) that ICMP not respond to broadcast or multicast
[page 38 et seq]?

What pressure is being put on host vendors?

Which host vendors are the problem?

WSimpson at UMich.edu
    Key fingerprint =  17 40 5E 67 15 6F 31 26  DD 0D B9 9B 6A 15 2C 32