I have a question regarding the Smurf Attack described in the following CISCO article:
In a smurf attack, an attacker broadcasts a large number of ICMP packets with the victim's spoofed source IP to a network using an IP broadcast address. This causes devices in the network to respond by sending a reply to the source IP address.
Now looking at the picture in the article, I assume the "attacker" is sending a ICMP packets with the victim's spoofed source IP to a network (it might by any network, right?) using an IP broadcast address. I also assume that the "victim" host is on a complete different network, hence my question is where to configure no ip directed-broadcast ? If the echo replies are sent back from the network we sent the ICMP packets to, it will have each system on that network the corresponding IP set as src address and the destination will be the victims IP. So how does this protect the victim ?