In OVH's case, I suspect that has more to do with their cheap pricing. With regards to abuse I consider them to be a responsible provider: they run uRPF (don't

In OVH's case, I suspect that has more to do with their cheap pricing. With regards to abuse I consider them to be a responsible provider: they run uRPF (don't allow spoofed traffic to exit their network), respond to abuse complaints and are also now implementing their so-called "VAC," which not only provides DDoS mitigation for their inbound flows but also DDoS filtering and anti-spam of their outbound flows. (They can determine when a server is spamming this way and either terminate it or put it in rescue mode and alert the owner that it has been compromised... assuming the owner isn't the one doing it, of course.) In Ecatel's case, that has to do with them both openly allowing (via their sales team) DDoS attacks, as well as _not_ implementing uRPF at their edge. They allow spoofed traffic. I have no clue why _any_ carrier deals with them; all of their upstreams should have terminated them ages ago. Does Voxility not run uRPF?