[afnog] ICMP/DNS tunneling mitigation

SM sm at resistor.net
Fri Dec 16 20:15:32 UTC 2011

Hi Mike,
At 07:12 16-12-2011, Mike Barnard wrote:
>Any ideas on how to mitigate ICMP and DNS tunneling or for that 
>matter, any form of tunneling that allows one access to the Internet 
>without paying for it and moreover, using someones infrastructure to do so?

You could block all off-net traffic from non-authenticated clients.


More information about the afnog mailing list