The warning of doing this is be sure you're running code that
doesn't generate icmp administrativeley prohibited messages for each packet
denied, else that will melt down your router cpu
(No router-wars here folks)
- Jared
Jamie Rishaw boldly claimed:
==> The warning of doing this is be sure you're running code that
==>doesn't generate icmp administrativeley prohibited messages for each packet
==>denied, else that will melt down your router cpu
For a Cisco, the only release this "fast drop" code is currently in is
11.1CA, release 11.1(13.5)CA and later. It is currently not in 11.2, but
is being worked on.
See http://www.quadrunner.com/~chuegen/smurf.txt for more information
regarding filtering/tracing capabilities (and information about "smurf"
attacks).
/cah