Old News.
They probably got a copy of the CERT advisory too, and they're reposting
it like it's some sort of new problem. CERT should have just posted this as
part of a monthly FAQ or so, but it's no new threat. People have been
able to do this for a LONG time. Configure your outside routers properly.
Ignore all address from coming from the outside in to block packets from
your domain (sound confusing?)
Just make sure you're blocking your perimeter's domain address from the outside
so people can't spoof. (see: Ches 'n bellovin's book, or their paper on
the same subject as pointed to by the latest CERT advisory.)
-john adams
|
|
