Re: [fw-wiz] IPv6 support in firewalls

On Thu, 23 Aug 2007 20:27:45 -0400
"Marcus J. Ranum" <mjr@xxxxxxxxx> wrote:

Steven M. Bellovin wrote:
You can always send broadcast pings on
each LAN

Does that work in V6? Sounds like a good DDoS amplifier - any place
where "one packet goes out, zillions come back" is a really useful
bit of asymmetry.

I said "broadcast ping", not "directed broadcast ping". The latter
would be dangerous indeed...


--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

Relevant Pages