Smurf-Attack Defenses
¨
http://www.pentic.net/denial-of-
service/white-papers/smurf.cgi
¨
Install adequate bandwidth and redundant
paths
¨
Filter ICMP messages at your border router
¨
Make sure that your network cannot be used
as a Smurf amplifier
–
Test via
http://www.powertech.no/smurf
–
Insert “no ip directed-broadcast” on Cisco
border routers
–