Re: [nsp] icmp blocking

From: fingers (fingers@fingers.co.za)
Date: Thu Mar 28 2002 - 02:39:19 EST

Hi

> I was looking for information about denying ICMP packets accross the
> backbone. What is the efficient/reccomended way of doing it? What are the
> drawbacks and maybe workarounds? I feel like if the backbone devices are
> open to ICMP they are vulnerable to DoS attacks. Any idea/reccomendation
> is welcome.

You may wish to think about rate-limiting it instead of denying it
outright.

Regards

--Rob

This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:38 EDT