Re: ICMPs & syn flood fix to prevent spoofing (previously "nuke?")

Darrell Fuhriman (darrell@grumblesmurf.net)
29 Oct 1996 11:05:32 -0800


alan@lxorguk.ukuu.org.uk (Alan Cox) writes:

> providers to filter fake source addresses coming FROM their networks will
> solve these problems for good. Unfortunately it doesn't make them thousands
> of dollars so they don't seem to give a shit.

That won't solve them for good, though. You just have to set up
the fake address to be a host that doesn't exist, but the address
is still on the allowed net. Sure, it makes it easier to trace,
but it doesn't get rid of the problem entirely.

Darrell Fuhriman