Smurf Attack

From: cisco monster (cisco.monster@gmail.com)
Date: Thu Aug 23 2007 - 14:55:16 ART

• Next message: ISolveSystems: "Re: IEWB 13 Task 4.2 - IP PIM Dense mode load balancing"
• Previous message: Mounir Mohamed: "Re: Question for you ISP guys"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello ,

Question is :

There is Smurf Attack in DoS that enter to R1's e0/0. Limit max 384kbps,
Normal Burst 8000 bytes . Use CAR.

now should i use which acl for above question :

Either

access-list 110 permit icmp any any echo
access-list 110 permit icmp any any echo-reply

OR

access-list 110 permit icmp any 0.0.0.0 255.255.255.0 echo
access-list 110 permit icmp any 0.0.0.0 255.255.255.0 echo-reply
access-list 110 permit icmp any 0.0.0.255 255.255.255.0 echo
access-list 110 permit icmp any 0.0.0.255 255.255.255.0 echo-reply
access-list 110 permit udp any 0.0.0.0 255.255.255.0 eq echo
access-list 110 permit udp any 0.0.0.255 255.255.255.0 eq echo
access-list 110 permit udp any eq echo 0.0.0.0 255.255.255.0
access-list 110 permit udp any eq echo 0.0.0.255 255.255.255.0

Regds

• Next message: ISolveSystems: "Re: IEWB 13 Task 4.2 - IP PIM Dense mode load balancing"
• Previous message: Mounir Mohamed: "Re: Question for you ISP guys"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Sep 01 2007 - 11:32:12 ART