intarea-2----Page:18
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21  22  23  24  25  26  27 

Preventing spoofing
Need to know real origin of attack packets
Must send filter request to the right place
IP source address of attack traffic may be spoofed.

Dumb idea:
Add a “true-source” bit to packets
Only Terminus ISPs with ingress filtering can set bit
PPT Version