Re: IP Fragment AttacK

From: Michael Dorion (dorionm@gmail.com)
Date: Mon Dec 08 2008 - 13:16:45 ARST


Is BB2 the name of a router, or the name of a VLAN/subnet? Did it ask you to
deny "any" fragment attacks or just specific ones?
My guess is you should change the source address to meet the requirements.
Even though your solution meets the requirements, it is not specifically
what they asked for. Trust me, they are not going to let little things like
that go in the lab!

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:08 ARST