ICMP Flooding vs SMURF Attack

From: Aamir Aziz (aamiraz77@gmail.com)
Date: Sun Aug 20 2006 - 08:08:31 ART

Hi there ppl

I just wanted to clear something, if the tast says that certain router is
experiencing attack via ICMP and UDP flooding does it mean SMURF ATTACK?
and would the following ACL work to mitigate this flooding issue?

deny icmp any 0.0.0.255 255.255.255.0 echo
deny icmp any 0.0.0.0 255.255.255.0 echo
deny icmp any 0.0.0.255 255.255.255.0 echo-reply deny icmp any 0.0.0.0
255.255.255.0 echo-reply
deny upd any 0.0.0.255 255.255.255.0 echo
deny upd any 0.0.0.0 255.255.255.0 echo
permit ip any any

Thanks
Aamir

This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART