Smurf Attacks

anyone have any knowledge on wireless smurf attacks. I have a belkin wireless
router and I recently checked the security log and found a couple of entries
that read **SMURF** then an ip address. My network is not broadcasting and I
only allow three machine to connect to it via their mac address. Should I be
concerned?

Darran,

These are IP-level attacks, and are not related to wireless, most likely
they are coming from the internet, not from the wireless network, but you
can check the source IP address to determine that. If you see the message
in your logs, then your router is most certainly catching these attacks.
Most routers would be configured to not respond to ICMP messages (coming
from the external, internet facing interface), because there is really no
need to. Any attack that is being caught is most likely not affecting your
network in any way, except by the fact that annoying messages are clogging
your logs. You may confirm that with the manufacturer of your router.


--
Brian Wehrle
(E-Mail Removed)
Software Test Engineer/Wireless Networking
Microsoft Corp.



"Darran" <(E-Mail Removed)> wrote in message
news:AA3A13D8-C9CC-41D6-99B1-(E-Mail Removed)...
> anyone have any knowledge on wireless smurf attacks. I have a belkin
> wireless
> router and I recently checked the security log and found a couple of
> entries
> that read **SMURF** then an ip address. My network is not broadcasting and
> I
> only allow three machine to connect to it via their mac address. Should I
> be
> concerned?

Many Thanks Brian. I have also checked with a colleague at work and showed
him a copy of the security log and he also states that its come from the net
rather than wireless. He also believes that as it is in the log, the router
has caught it and no harm has been done.

"Brian Wehrle [MSFT]" wrote:

> Darran,
>
> These are IP-level attacks, and are not related to wireless, most likely
> they are coming from the internet, not from the wireless network, but you
> can check the source IP address to determine that. If you see the message
> in your logs, then your router is most certainly catching these attacks.
> Most routers would be configured to not respond to ICMP messages (coming
> from the external, internet facing interface), because there is really no
> need to. Any attack that is being caught is most likely not affecting your
> network in any way, except by the fact that annoying messages are clogging
> your logs. You may confirm that with the manufacturer of your router.
>
>
> --
> Brian Wehrle
> (E-Mail Removed)
> Software Test Engineer/Wireless Networking
> Microsoft Corp.
>
>
>
> "Darran" <(E-Mail Removed)> wrote in message
> news:AA3A13D8-C9CC-41D6-99B1-(E-Mail Removed)...
> > anyone have any knowledge on wireless smurf attacks. I have a belkin
> > wireless
> > router and I recently checked the security log and found a couple of
> > entries
> > that read **SMURF** then an ip address. My network is not broadcasting and
> > I
> > only allow three machine to connect to it via their mac address. Should I
> > be
> > concerned?
>
>
>