smurf amp nets
Mikael Abrahamsson
swmike at swm.pp.se
Sat Jun 13 08:14:11 UTC 1998
On Sat, 13 Jun 1998, Jared Mauch wrote:
> One other thing, it would be interesting if someone started
> a smurf at a smurf amp. (I'm tired, but believe that can be
> done, but not going to think too much about it. The loop
> would be interesting, and require some fun intervention to fix).
I think this is the way of the future when smurf amps get fixed. People
will put these kind of things on hacked machines, sending spoofed floods
to broadcast adresses locally. Since everybody seems to be going to
switched nets this can create substantial amount of data.
I think the only way to solve this more permanently is to remove the
response of ICMP data to broadcast adresses in the OS. Is anyone
preassuring for this to happen? Is there a list of OS that actually does
respond to ICMP to broadcast adresses?
-----
Mikael Abrahamsson email: swmike at swm.pp.se
More information about the NANOG
mailing list