> Unless you know for sure that the src address isn't spoofed though, such a mechanism would itself be abused to deny service. Unfortunately, even if you know

> Unless you know for sure that the src address isn't spoofed though, such a mechanism would itself be abused to deny service. Unfortunately, even if you know that the source address isn't spoofed, such a mechanism would itself be abused to deny service