Re: [savi] Identifying First-Hop Vs. Forwarded Traffic

[Christian Vogt <christian.vogt at ericsson.com>]

On Oct 31, 2008, marcelo bagnulo braun wrote:

> > The reason I am saying that approach (1) is "opt-in" is this:  Before
> > the attack, the SAVI device does not even perform any validation at  
> > all.
>
> what do you mean? AFAIU, the SAVI device by default drops all the
> packets except those coming with a source address containing one of  
> the
> on-link prefixes.

So a SAVI device by default drops all packets from off-link prefixes?
But the validation of these packets is exactly what we want to leave to
ingress filtering, right?

Then, since we leave to ingress filtering the validation of packets with
off-link prefixes, the SAVI device should let these packets pass IMO.

- Christian