Re: [fw-wiz] IPv6 support in firewalls

On Thu, 23 Aug 2007 20:27:45 -0400
"Marcus J. Ranum" <mjr@xxxxxxxxx> wrote:

Steven M. Bellovin wrote:
You can always send broadcast pings on
each LAN

Does that work in V6? Sounds like a good DDoS amplifier - any place
where "one packet goes out, zillions come back" is a really useful
bit of asymmetry.

I said "broadcast ping", not "directed broadcast ping". The latter
would be dangerous indeed...

--Steve Bellovin,
firewall-wizards mailing list

Relevant Pages