Yep, I'm running FW-1. I can drop the packets in my rulebase OK but
they still saturate the network in front of my box before I can drop
them.
On Tue, Oct 03, 2000 at 08:18:52AM -0500, Jason LaFlair spoke thusly:
> are you running FW-1? If so make your first rule ICMP-Drop and that should
> clear you up and block it yourself.
>
> If this doesn't help let me know and I can look into another solution.
>
> Jason LaFlair
> [EMAIL PROTECTED]
>
> ----- Original Message -----
> From: "Tim Gollschewsky" <[EMAIL PROTECTED]>
> To: "Firwall-1 List" <[EMAIL PROTECTED]>
> Sent: Tuesday, October 03, 2000 7:38 AM
> Subject: [FW1] How do I stop being smurfed?
>
>
> >
> > Hi,
> >
> > One of the sites I manage is currently under a heavy smurf attack, the
> > only way I can think of to stop it is to go upstream to my provider
> > and ask them to block echo-replys (or just ICMP) to the target machine,
> > but my provider (exodus) refuses to help. :(
> >
> > Is there ANYTHING else I can do?
> >
> > Thanks,
> >
> > Tim.
> >
> >
> >
> ============================================================================
> ====
> > To unsubscribe from this mailing list, please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> >
> ============================================================================
> ====
> >
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
