From jordy@newport.thirdwave.net  Mon Sep 16 15:31:58 1996
Received: (sendmail@localhost) by suburbia.net (8.7.4/Proff-950810) id PAA15582 for <best-of-security@suburbia.net>; Mon, 16 Sep 1996 15:31:58 +1000
Received: from newport.thirdwave.net(205.136.33.131)
 via SMTP by profane.adso.com.au, id smtpd15359aaa; Mon Sep 16 05:31:33 1996
Received: from localhost (jordy@localhost) by newport.thirdwave.net (8.8.Beta.3/8.8.Beta.3) with SMTP id AAA11909; Mon, 16 Sep 1996 00:27:30 -0500
Date: Mon, 16 Sep 1996 00:27:29 -0500 (CDT)
From: Jordy <jordy@newport.thirdwave.net>
To: route@onyx.infonexus.com
cc: Alfy <sricca@worldcom.ch>, best-of-security@suburbia.net
Subject: Re: BoS: ping flood
In-Reply-To: <19960915015214.27942.qmail@onyx.infonexus.com>
Message-ID: <Pine.LNX.3.94.960916002611.10258B-100000@newport.thirdwave.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

> 
> | 
> | hello do you people know if there's a way for a system admin to prevent ping
> | floods from faster machines and which may cause a hudge slowdown of the
> | connection ? 
> 
> 	Drop ICMP_ECHO packets at the router.  There is nothing one can do to 
> 	*stop* ICMP_ECHO floods, one can only ignore them...

i find it better to simply call up my NSP and deny them there, keeps the
bandwidth from getting saturated.