Subject: Re: broadcast ping response
To: NetBSD Networking Technical Discussion List <tech-net@NetBSD.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-net
Date: 01/24/2005 18:25:55
> I would say that "well known DoS" w.r.t. broadcast ping is a bit of a
> myth, or at least a misunderstanding at best.

No, just out of date.  There was a time when smurf attacks were a real
problem.

> A smurf attack cannot be triggered through any properly protected
> network gateway --

No...but a local user can smurf a distant site and make it rather hard
to identify the source of the packets, especially since anyone who can
forge ip_src can also forge ether_shost.  Admittedly, there aren't all
that many networks for which this is a more than theoretical threat.

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B