[...new(?) smurf-style DoS attack...]
Prevention
[...]
The Internet Service Providers (ISPs) must take action to drop long
ICMP packets in the backbone networks (any packet longer than 1499
bytes, at least).
This strikes me as a very bad idea. It's rather like saying, NFS can
be used to
The Internet Service Providers (ISPs) must take action to drop long ICMP
packets in the backbone networks (any packet longer than 1499 bytes, at
least).
This will break existing "good behaviour" legal systems and potentially
disrupt MTU discovery proceedure. It isnt a feasible option without
-code used
to scan for OS9 Macintoshes, and the C-code to excite them into attack
mode.
John Copeland (please send email to 2 addresses, [EMAIL PROTECTED] and
[EMAIL PROTECTED]).
Voice Mail: 404 894-5177
=====
The "Mac Dos Attack," a Scheme for Blocking Internet Connections