[Intrusions] ICMP_REDIRECT

[Kirk Ismay]

Smith, Donald wrote:
> Redirects to the entire subnet to a new gateway.
> It sounds evil to me.

I've discovered that the 'stimulus' that these routers are responding to 
is NetBios broadcasts from Windows systems in other subnets on the same 
wire.  Its not malicious....  just stupid.

So the solution for me is to work on getting residential users to turn 
off "Client for Microsoft Networks" before connecting to the `net. I 
might also be able to set up firewall rules to block incoming traffic on 
the WAN port.

-- 
Sincerely,
Kirk Ismay
System Administrator

--
Net Idea
101-625 Front Street Nelson, BC V1L 4B6
P:250-352-3512 | F:250-352-9780 | TF:888-246-4222

10 Years of Service Excellence!

Visit us online at:
www.netidea.com | www.netidea.biz