That got me thinking... does a smurf attack have to be ICMP, or can it be UDP?
I think it can be UDP too, because the point is using the directed bcast address? Thoughts? On 5 June 2012 21:58, Matt Hill <[email protected]> wrote: > Probably not.. The attack could be a UDP flood. > > On 5 June 2012 21:35, Fawad Khan <[email protected]> wrote: >> How about blocking echo and echo-reply as well, one coul be victim or >> reflector. >> >> >> On Tuesday, June 5, 2012, Matt Hill wrote: >>> >>> Off the top of my head... An ACL with the broadcast address as the >>> destination? (???) >>> >>> Cheers, >>> Matt >>> >>> CCIE #22386 >>> CCSI #31207 >>> >>> On 5 June 2012 18:03, Kingsley Charles <[email protected]> wrote: >>> > Hi all >>> > >>> > How do we block smurf attacks on an interface other than using "no ip >>> > directed-broadcast"? I can't think of any other commands. >>> > >>> > >>> > With regards >>> > Kings >>> > >>> > _______________________________________________ >>> > For more information regarding industry leading CCIE Lab training, >>> > please >>> > visit www.ipexpert.com >>> > >>> > Are you a CCNP or CCIE and looking for a job? Check out >>> > www.PlatinumPlacement.com >>> _______________________________________________ >>> For more information regarding industry leading CCIE Lab training, please >>> visit www.ipexpert.com >>> >>> Are you a CCNP or CCIE and looking for a job? Check out >>> www.PlatinumPlacement.com >> >> >> >> -- >> FNK _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
