On Sun, 30 Jun 2002, Derek D. Martin wrote:
> Bad, bad idea.  This turns an attack back on the attacker, who may or
> may not really be the source of the attack.  This sort of retaliatory
> measure is illegal in many states and on a fedral level, and you may
> find yourself in court for doing it.

I would seriously argue the legality of this.  We all know you can find 
yourself in court for anything - even sending this message.  Being taken 
to court doesn't make something illegal and I think the prosecutor would 
be hard pressed to prove that there was any kind of criminal intent.  It 
would be trivial to turn this around to say 'the real attacker is the one 
who did this to me!  I use this mirroring for my own system 
administration!'  

While this could be -considered- a bad idea, the MIRROR target also has 
many interesting uses, the least of which are to direct packets back at an 
attacker.  There's a lot of things you could do to protect yourself 
against spoofed packets and the dangers of them with regards to MIRROR.

Ben

-- 

"It is easier to fight for principles than to live up to them."


*****************************************************************
To unsubscribe from this list, send mail to [EMAIL PROTECTED]
with the text 'unsubscribe gnhlug' in the message body.
*****************************************************************

Reply via email to