Date: Wed, 27 May 1998 09:22:50 -0700 From: Cy Schubert - ITSD Open Systems Group <cschuber@uumail.gov.bc.ca> To: Bart Smit <bit@signature.nl> Cc: "J.A. Terranson" <sysadmin@mfn.org>, "'FreeBSD Security'" <freebsd-security@FreeBSD.ORG> Subject: Re: SMURF in 2.2.5 Message-ID: <199805271623.JAA05578@passer.osg.gov.bc.ca> In-Reply-To: Your message of "Wed, 27 May 1998 10:50:05 %2B0200." <Pine.BSF.3.96.980527104739.29546A-100000@pollux.or.signature.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
>
> On Wed, 27 May 1998, J.A. Terranson wrote:
>
> > I will not report this to bugtraq untill you guys tell me there's
> > a patch...
>
> Well, sysctl -w net.inet.icmp.bmcastecho=0 does not help, contrary to
> what you'd expect from the advisory...
What about ipfw? For example, where 123.123.123.0 is your network
address,
ipfw add deny icmp from 123.123.123.0 to any
ipfw add deny icmp from 123.123.123.255 to any
or better yet (which will help stop a fraggle attack),
ipfw add deny all from 123.123.123.0 to any
ipfw add deny all from 123.123.123.255 to any
Any thoughts anyone?
>
> --Bart
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe security" in the body of the message
Regards, Phone: (250)387-8437
Cy Schubert Fax: (250)387-5766
Open Systems Group Internet: cschuber@uumail.gov.bc.ca
ITSD Cy.Schubert@gems8.gov.bc.ca
Government of BC
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805271623.JAA05578>