Re: (ASCEND) Directed Broadcasts

["Leon McCalla" <ascend@caribbeanlink.com>]

there are things much worse than what you are talking about on the net.
there are programs that utilize the broadcast address spoofing your address
as the return address.

which is worse? having a machine flooded from your own LAN because someone
is pinging your broadcast address? Or being flooded by a hundred networks
that are supposedly returning a ping to thier broadcast networks from your
machine.

Leon

-----Original Message-----
>broadcast pings to the directed broadcast address of a network seem
>to be a new beloved toy of the Bad Guys out there on the net. We've
>seen extraordinairy amounts of traffic produced this way for some
>customers who were attacked, and the customers are really not amused
>(we do volume oriented accounting). I know I could set a filter to
>drop traffic to the directed broadcast address but IMHO this should
>better be a nice little and simple


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

---

• Prev by Date: (ASCEND) MRTG and Interface Table
• Next by Date: Re: (ASCEND) SNMP traps on MAX2000 not working?
• Prev by thread: Re: (ASCEND) Directed Broadcasts
• Next by thread: (ASCEND) CRC error after tloading 5.0Ai28?
• Index(es):
  • Main
  • Thread