Re: [nsp] Cisco Recommended Filters

From: Eric Kozowski (kozowski@structured.net)
Date: Fri Jan 02 1998 - 20:37:05 EST

Next message: Jim Warner: "Re: [nsp] Cisco Recommended Filters"
Previous message: Everett Dowd: "Re: [nsp] Stable 11.2/11.3 for 7206/7505?"
In reply to: Tom: "[nsp] Cisco Recommended Filters"
Next in thread: Jim Warner: "Re: [nsp] Cisco Recommended Filters"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

At 07:38 PM 1/2/98 -0500, you wrote:
>Cisco Guru's:
>
>There has been a good amount of discussion on these lists the last few
>months in regards to what filters NSP's and ISP's have applied to their
>core and edge routers, to prevent smurfs and other various DoS attacks.

If you do nothing else, use "no ip directed-broadcast". Otherwise, you
should use ingress filtering. See the NANOG archives for more info.

--
Eric Kozowski              Senior Network Engineer
eric@structured.net        Structured Network Systems, Inc.
(800)390-5945 Support      A member of the Verio group of ISPs
(503)525-9196 Sales/Info   http://www.structured.net/
'They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety.' -- Benjamin Franklin 1759

Next message: Jim Warner: "Re: [nsp] Cisco Recommended Filters"
Previous message: Everett Dowd: "Re: [nsp] Stable 11.2/11.3 for 7206/7505?"
In reply to: Tom: "[nsp] Cisco Recommended Filters"
Next in thread: Jim Warner: "Re: [nsp] Cisco Recommended Filters"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:14 EDT