Looking for a CAR'ish work around

• Next message: Greg Ketell: "RE: [j-nsp] OC-192 Perf issues with ACL's"
• Previous message: Charles Tan: "[j-nsp] unsubscribe"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Mail actions: [ respond to this message ] [ mail a new topic ]

Hello,
JunOS doesn't currently support CAR on a per protocol
basis, and I am looking for a work around. Specifically, we
use the cleverism of allowing only a reasonable amount of
icmp traffic in the door at our edges to successfully
thwart inbound smurf attacks. (Thank you Cathy from @Home!)

I've tried to think of a work around (other than shutting down
icmp altogether) and I can't come up with anything. A Juniper
SE is going to take it up with support@juniper, but I thought
I'd ask this list as well.

Thanks in advance for any ideas.
Dave Curado

• Next message: Greg Ketell: "RE: [j-nsp] OC-192 Perf issues with ACL's"
• Previous message: Charles Tan: "[j-nsp] unsubscribe"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:40 EDT