Hello

I have a colocation client that is a shell provider.

sigh.

Well, with shells you get smurfed.

How do I block smurf attack on the router?
or the firewall ?

Host IRCD and get smurfed ?
Loose IRCD clients and dont eat bandwith ?

That is the question.

i think you have to get the Ip's blocked from your upstream provider.
If you simple block it on your own network then the packets are still hitting you, so you will still get the slowdown.
Has to be done pretty high up iirc.

Cheers

Craig

Dump the client that is providing the shells. If that one machine is responsible (so to speak) for the attacks, it's not worth it to keep them around. It'll end up costing YOU in the long run.

Originally posted by Mike
Dump the client that is providing the shells. If that one machine is responsible (so to speak) for the attacks, it's not worth it to keep them around. It'll end up costing YOU in the long run.

I would agree, dump him or he will be a continuous headache... you'll save enough in asprin costs to justify this.

Regards,

Mike

=]