On Thu, Jun 27, 2002 at 01:18:04PM -0400, Peter Brezny wrote: > I did a quick search through the man page, but didn't come up with anything > right off that looked like it could help mitigate smurf attacks similar to > the cisco: > no ip directed-broadcast > > feature. > > Is there a way?
sysctl net.inet.icmp.bmcastecho=0 has been the default since... well since smurf came out. :) -- Richard A Steenbergen <[EMAIL PROTECTED]> http://www.e-gerbil.net/ras PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6) To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
