Return Routability Tests (#6, #15, #18) Goal: protect against 3rd party bombing attacks Outsiders cause our IPsec stream to be directed towards a victim Unreliable peer (virus etc) directs the stream Note: Bad nodes can always send packets to victims, the only question is how much amplification we give to them Primary defense is probing (testing) an address Also known as “return routability test” The main issue is when and how |