4 ms·
the problem is ICMP can be abused for attacks like ICMP flood, ICMP smurf, because src.ip can be easily spoofed. its very easy and cheap to saturate a link wit
by slt2021 1y ago
the problem is ICMP can be abused for attacks like ICMP flood, ICMP smurf, because src.ip can be easily spoofed.
its very easy and cheap to saturate a link with flood traffic, but fixing this issue requires large investments in big expensive firewalls that can block these stupid attacks
- citrin_ru 1y agoDNS and SNMP with a spoofed src IP have higher amplification factor and the root of the problem here are ISP which allow they customers to spoof src IP.
- eqvinox 1y ago> ICMP smurf IP stacks haven't responded to broadcast pings for ≥20 years now. If you find one that does, please report it so it can get fixed. > because src.ip can be easily spoofed Operators have been pushing to get BCP38 everywhere for ≥ 20 years now. If you find one that doesn't do it, please report it so I can depeer and shame them on public mailing lists. > ICMP flood So you'll just get flooded with UDP instead (cf. sibling comment).
- yjftsjthsd-h 1y agoAre you blocking UDP, too?