A network engineer investigates an intermittent flood of ICMP echo replies overwhelming a company's edge router. Analysis shows external attackers are sending ICMP echo requests with a spoofed source address (the victim server's IP) to the company's network broadcast address, causing all internal hosts to reply and amplify traffic toward the victim. Which configuration change most directly prevents the company's network from being used as an amplifier in this attack?