Smurf attack

From: Mike Black (mblack@csihq.com)
Date: Thu May 18 2000 - 06:47:31 EST


We're currently running 2.2.15pre18.
We were subjected to a ping smurf attack this week and I tried to disable
icmp broadcasts with:
echo 1 >/proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
The pings to x.x.x.255 and x.x.x.0 still caused the machine(s) to respond.
I also tried to raise the icmp_echoreply_rate to 1000 with no effect.

Is there something I'm missing here? Why aren't these working?

________________________________________
Michael D. Black Principal Engineer
mblack@csihq.com 321-676-2923,x203
http://www.csihq.com Computer Science Innovations
http://www.csihq.com/~mike My home page
FAX 321-676-2355

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Tue May 23 2000 - 21:00:15 EST