Re: Blocking of ICMP Packets [7:2288]

2001-04-29 Thread suaveguru
I have always used CAR for that an example will be : interface abc rate-limit output access-group 140 4500 100 100 100 conform-action transmit exceed-action drop access-list 200 permit icmp any any echo-reply regards, suaveguru --- Carroll Kong wrote: > At 02:06 PM 4/28/01

Re: Blocking of ICMP Packets [7:2288]

2001-04-29 Thread Carroll Kong
At 02:06 PM 4/28/01 -0400, Muhammed Khalilullah wrote: >Have you tried 'TCP Intercept List' to avoid DOS >attacks??? > >CCNP, MCSE > >--- Jason Roysdon wrote: > > Use CAR to limit ICMP down, but still allow it > > through. > > > > -- > > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, > > Network+,

Re: Blocking of ICMP Packets [7:2288]

2001-04-28 Thread Muhammed Khalilullah
Have you tried 'TCP Intercept List' to avoid DOS attacks??? CCNP, MCSE --- Jason Roysdon wrote: > Use CAR to limit ICMP down, but still allow it > through. > > -- > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, > Network+, A+ > List email: [EMAIL PROTECTED] > Homepage: http://jason.artoo.net/

Re: Blocking of ICMP Packets [7:2288]

2001-04-28 Thread Jason Roysdon
Use CAR to limit ICMP down, but still allow it through. -- Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+ List email: [EMAIL PROTECTED] Homepage: http://jason.artoo.net/ ""Barry Kiesz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > We are currently experiencing a

Blocking of ICMP Packets [7:2288]

2001-04-27 Thread Barry Kiesz
We are currently experiencing a DOS attack where the attacker is sending ICMP Requests, say 40 a second, to an address on our network that does not have a device hooked up to it. Looking at the tcpdump, all it is is a bunch of requests, no replies, no "unavailables", etc. Even though it's not hi