DDoSes are easy because ISPs don't want to filter traffic (BCP 38). If ISPs did this, then it wouldn't be so easy to spoof source IPs and much easier to block o

DDoSes are easy because ISPs don't want to filter traffic (BCP 38). If ISPs did this, then it wouldn't be so easy to spoof source IPs and much easier to block or track down offenders. I don't see how CISA is gonna change this. If the USG wanted to stop this stuff, they'd create a policy forcing ISPs to filter. Same as VoIP and fake caller ID. If the FCC really cared, they'd start fining.