[Dshield] NIPC Information

Johannes B. Ullrich jullrich at sans.org
Wed Aug 20 02:30:30 GMT 2003


> With any luck, the ISPs will block ICMP.  That'll stop ping DoSs, too, as a
> side effect.

blocking ICMP is problematic at best. But rate limiting it may help and
is frequently done anyway. If an ISP will block ICMP, they will likely
get numerous calls from users about web sites that are 'down' because
they do not respond to ping.

> By the way, this is Network Associates freeware plugin for OE.  It doesn't
> send it as an attachement.

very nice. Still working on finding an 'armored ascii' solution for
evolution :-/

-- 
SANS - Internet Storm Center
http://isc.sans.org
PGP Key: http://isc.sans.org/jullrich.txt




More information about the list mailing list