ICMP Flooding vs SMURF Attack
Hi there ppl
I just wanted to clear something, if the tast says that certain router is experiencing attack via ICMP and UDP flooding does it mean SMURF ATTACK? and would the following ACL work to mitigate this flooding issue?
deny icmp any 0.0.0.255 255.255.255.0 echo deny icmp any 0.0.0.0 255.255.255.0 echo deny icmp any 0.0.0.255 255.255.255.0 echo-reply deny icmp any 0.0.0.0 255.255.255.0 echo-reply deny upd any 0.0.0.255 255.255.255.0 echo deny upd any 0.0.0.0 255.255.255.0 echo permit ip any any
Thanks Aamir
























