ICMP fragments DOS Attack

[Giorgos Keramidas]

On 2003-02-18 18:54, Evripidis Papakostas <evris at source.gr> wrote:
> CyberCr33p wrote:
> >Kapoios mou kanei dos attack stelnontas icmp fragments se enan server
> >mou. To attack ginetai apo 6-7 diaforetikous servers. Uparxei kapoios
> >tropos na empodisw na mou trwei bandwidth? H prepei anagkastika na
> >epikoinwnisw me ton ISP na mou blockaroun autoi ta icmp paketa pou
> >erxonte pros ton server mou?
>
> minor disadvantage:
> den ksero gia to an glitoseis to attack etsi, pantos xoris icmp paketa,
> tha steritheis ektos kai tin traceroute

Swstos.

An einai aparaithth h xrhsh tou traceroute, kai prepei opwsdhpote na
kopoun ta icmp paketa, as mou pei opoios endiaferetai.  Mporei na
ksebaretho kai na kanw port ta local modifications tou FreeBSD
traceroute se Linux.  Einai basismena stin ekdosh 1.4.a12 tou
LBL-traceroute kai epitrepoun anamesa sta alla options opws:

	% traceroute -P udp host [...]

Giorgos