Re: [swinog] Rate-Limiting ICMP

2003-09-18 Thread Fredy Kuenzler
Roger Buchwalder wrote: found on: http://www.cisco.com/warp/public/707/cisco-sn-20030820-nachi.shtml#policyrouting says: Warning: Microsoft Windows tracert utility uses 92 bytes sized ICMP packets. Using PBR to filter those packets will cause tracert utility not to work. Nachhi & windows trace

Re: [swinog] Rate-Limiting ICMP

2003-09-17 Thread Roger Buchwalder
Hello found on: http://www.cisco.com/warp/public/707/cisco-sn-20030820-nachi.shtml#policyrouting says: Warning: Microsoft Windows tracert utility uses 92 bytes sized ICMP packets. Using PBR to filter those packets will cause tracert utility not to work. Nachhi & windows tracert's free... Roger

Re: [swinog] Rate-Limiting ICMP

2003-09-17 Thread Fredy Kuenzler
Lukas Beeler wrote: * Fredy Kuenzler <[EMAIL PROTECTED]>: We seem to experience quite a bit of ICMP DOS attacks. The come along in waves, which makes some devices within our backbone stumble and loosing packets. DoS, or the well known nacchi worm? (Nacchi uses 92byte Packets exclusively, so it s

Re: [swinog] Rate-Limiting ICMP

2003-09-16 Thread Lukas Beeler
* Fredy Kuenzler <[EMAIL PROTECTED]>: > We seem to experience quite a bit of ICMP DOS attacks. The come along in > waves, which makes some devices within our backbone stumble and loosing > packets. DoS, or the well known nacchi worm? (Nacchi uses 92byte Packets exclusively, so it should be easy

[swinog] Rate-Limiting ICMP

2003-09-16 Thread Fredy Kuenzler
We seem to experience quite a bit of ICMP DOS attacks. The come along in waves, which makes some devices within our backbone stumble and loosing packets. As ICMP should generally not be blocked, I'm thinking about rate limiting it on core routers. Any hints, links, suggestions? Thanks Fredy --