Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(ASCEND) GRF filter to block Smurf attacks
-----BEGIN PGP SIGNED MESSAGE-----
Out of curiousity has anyone with a GRF designed a filter config
to stop smurf (broadcast) attacks? A recent "irc packet warrior" decided
to smurf one of our dial-up boxes and lit our hubs in the NOC up like a
burning X-mas tree... current fix was to block all ICMP traffic from the
class B block the broadcast packets were coming as. Not the best fix but
it stopped the X-mas tree affect on the hubs. We're looking at a more
permanent solution that can keep this frmo happening again.
Respectfully,
Jeremy T. Bouse
,-----------------------------------------------------------------------------,
| Jeremy T. Bouse - SouthNet TeleComm Services, Inc. - www.STSI.net |
| PGP ID/Fingerprint: 1024/E83D9AE5/4ACC03F098D78198 19D0593E50E597E9 |
| Public PGP key available via 'finger undrgrid@UnderGrid.net' |
| undrgrid@UnderGrid.net - NIC Whois: JB5713 - sysadmin@STSI.net |
| Anti-trust laws should be approached with exactly that attitude. |
`-----------------------------------------------------------------------------'
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: noconv
iQCVAwUBNgknX+ak13roPZrlAQENGwP+NOzKNxt4+escEfDWzaPi9huOffX2h2Dm
SurytKfhw+fXYEYAzT4mUeppCFLVSV6ti/83I6tbpHdWUVsHX/iIAPsuE1tU9+u5
srqBpy385bug5KhrBBLhQjjZjjF8k8WEnDcNsBvmxWeorC1fuSP+j/9eED3NMabj
Kvot+ln/ElE=
=oPNY
-----END PGP SIGNATURE-----
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
Follow-Ups:
References: