I have always used CAR for that
an example will be :
interface abc
rate-limit output access-group 140 4500 100
100 100 conform-action transmit exceed-action
drop
access-list 200 permit icmp any any echo-reply
regards,
suaveguru
--- Carroll Kong wrote:
> At 02:06 PM 4/28/01
At 02:06 PM 4/28/01 -0400, Muhammed Khalilullah wrote:
>Have you tried 'TCP Intercept List' to avoid DOS
>attacks???
>
>CCNP, MCSE
>
>--- Jason Roysdon wrote:
> > Use CAR to limit ICMP down, but still allow it
> > through.
> >
> > --
> > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA,
> > Network+,
Have you tried 'TCP Intercept List' to avoid DOS
attacks???
CCNP, MCSE
--- Jason Roysdon wrote:
> Use CAR to limit ICMP down, but still allow it
> through.
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA,
> Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
Use CAR to limit ICMP down, but still allow it through.
--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
""Barry Kiesz"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> We are currently experiencing a
We are currently experiencing a DOS attack where the attacker is sending
ICMP Requests, say 40 a second, to an address on our network that does not
have a device hooked up to it. Looking at the tcpdump, all it is is a bunch
of requests, no replies, no "unavailables", etc. Even though it's not
hi
5 matches
Mail list logo