[FW1] Re:

[amanda@FW1-NOSPAMwineasy.se]

In a smurf attack there is a reflection network somewhere that is sending
the echo replies. That network can not be spoofed and you can easily find
out who they are. Call them, mail them, mail their ISP, mail their  
neighbours and tell everybody that they must stop the attack. Their pipe  
has just as much smurf traffic as your pipe has, so it is in their best
interest to help you. Explain that to them.
 
One thing you can do with a provider like Exodus is that you can rent some
rack space on their co-location site and put your own router there  
(perhaps with some dns/www/mail-servers etc). That way you have full  
access to the router the next time you want to do some remote filtering.
 
Amanda.
 
 
On Tue, 3 Oct 2000, Tim Gollschewsky wrote: 
> This is my point, I control my FW, the next hop is a router 
> controlled by Exodus who refuse to put any ACLs on it.  I can't
> see any solution other than finding a new ISP.