> On Sep 29, 2015, at 3:19 PM, Ben Pfaff <b...@nicira.com> wrote: > > On Mon, Sep 21, 2015 at 06:06:16PM -0700, Justin Pettit wrote: >> >> >> We may want to drop traffic sent to an IP broadcast address to prevent >> things like Smurf attacks. > > It's an option, sure. > > It might not be viable to launch a Smurf attack from within a logical > network when port security is turned on.
Couldn't it be an issue with traffic coming from a gateway? --Justin _______________________________________________ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev