Disable Echo Reply

From: Martin D. Baldenegro (RRNC) (mdb@cwiz.com)
Date: Fri Apr 11 2003 - 21:29:05 EDT


  Sun Managers,
  
  I keep getting the following on several of the systems in my
  network. I have commented out the echo lines in both the
  /etc/inet/services and in /etc/inet/inetd.conf but I can not
  seem to stop the DOS on my network. The below output goes on
  for several hours and has basically put the network at a crawl.
  
  The systems are running Solaris 8 and 9 different updates.
  
  Anyone else run into this problem, and what else can be done to
  prevent echo replys from the systems inside the network.
  
  TIA,
  
          /mdb

-----snoop output -----
  www.recomp.tv -> xxx.xxx.xxx.255 UDP D=23920 S=5192 LEN=9
  www.recomp.tv -> xxx.xxx.xxx.0 UDP D=35903 S=56090 LEN=9
  www.recomp.tv -> xxx.xxx.xxx.255 ICMP Echo request (ID: 0 Sequence number: 0)
        maya -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
      navajo -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
    dosmanos -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
      apache -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
      azteca -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
    printsrv -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
       yakii -> www.recomp.tv ICMP Echo reply (ID: 0 Sequence number: 0)
  www.recomp.tv -> xxx.xxx.xxx.0 UDP D=50403 S=35197 LEN=9
  www.recomp.tv -> xxx.xxx.xxx.255 UDP D=52890 S=62425 LEN=9

===============================================================
Martin D. Baldenegro (RRNC)
Cwiz Resources, Inc.
Re-Thinking Knowledge
Westminster, CO. 80020-8723
Direct Phone #: 303-478-4790
E-mail: mailto:mdb@cwiz.com
===============================================================
" Do Not Squander Time, For That Is The Stuff Life Is Made Of "
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:26:11 EDT