[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Ability to withstand well known attacks (fwd)



On 31 Jul 2003 ericb@digitaljunkyard.net wrote:
> bf> Ping flood to an IP address of the device
> If you exceed the inbound bandwidth, there is nothing that can be
> done, and it's foolish to require vendors to do so.  At this point,
> the device must rely on other network components to protect it.  The
> capabilities to do so are presented in other requirements.

ping flood MUST NOT render other OOB management paths unusable.
eg serial console MUST NOT go stuff just because its being ping flooded on 
ethernet.

-Dan
-- 
[-] Omae no subete no kichi wa ore no mono da. [-]