it would be pretty helpful, though, for Bootp Relaying to an entire subnet
using directed broadcast as opposed to a specific BOOTP Address...

Gil Shulman <[EMAIL PROTECTED]> wrote in message
D528DF24AEBCD311A17700508B92CBBF102086@NEWMAN">news:D528DF24AEBCD311A17700508B92CBBF102086@NEWMAN...
> Hi,
>
>    The removal of directed-brooadcasts is one of the security messures
that
> is being taken place on the router.
> The IP directed broadcast is a datagram which is sent to the broadcast
> address of a subnet to which the sending machine is not directly attached.
> The directed broadcast is routed through the network as a unicast packet
> until it arrives at the target subnet, where it is converted into a
> link-layer broadcast.
> The directed-broadcasts arp being used in the extremely common and popular
> "smurf" denial of service attack, and can also be used in related attacks.
>
>
>      I hope it helps
>
>
>         Gil
>
>
> -----Original Message-----
> From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED]]
> Sent: ??? ??? 05 ?????? 2001 06:13
> To: [EMAIL PROTECTED]
> Subject: Re: ip directed broadcast
>
>
> >hi all
> >
> >anyone knows why no ip directed broadcast is always
> >set for any interfaces?
> >
> >
> >regards,
> >
> >suaveguru
>
>
> RFC 2644 Changing the Default for Directed Broadcasts in Routers. D.
>       Senie. August 1999. (Format: TXT=6820 bytes) (Updates RFC1812) (Also
>       BCP0034) (Status: BEST CURRENT PRACTICE)
>
> _________________________________
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to