On Thu, Jun 27, 2002 at 01:18:04PM -0400, Peter Brezny wrote:
> I did a quick search through the man page, but didn't come up with anything
> right off that looked like it could help mitigate smurf attacks similar to
> the cisco:
> no ip directed-broadcast
>
> feature.
>
> Is there a way?
sysct
Nothing automatic or shorthand, but
add deny ip from any to x.y.z.255 (or whatever your broadcast is)
will work just fine.
On Thu, Jun 27, 2002 at 01:18:04PM -0400, Peter Brezny wrote:
> I did a quick search through the man page, but didn't come up with anything
> right off that looked like
Peter Brezny wrote:
> I did a quick search through the man page, but didn't come up with anything
> right off that looked like it could help mitigate smurf attacks similar to
> the cisco:
> no ip directed-broadcast
>
> feature.
>
> Is there a way?
I thought directed broadcasts where disabled by