3 ms·
What you suggest is actually the default behavior of most major carriers. Its codified here: http://tools.ietf.org/html/bcp38 http://tools.ietf.org/html/bcp38
by dsl 13y ago
What you suggest is actually the default behavior of most major carriers. Its codified here: http://tools.ietf.org/html/bcp38 http://tools.ietf.org/html/bcp38
That said, source address spoofing is needed for some one-way satellite internet providers.
There are also some really cool advanced load balancing tricks you can do with it. It even comes in handy (ironically) when doing DDoS mitigation.
- theknown99 13y agoIs it the default behavior of major carriers in Russia/China/Africa/etc as well as in Europe/America? My experience has been that the majority of the countries where attacks come from do not really care.
- Nyr 13y agoYes, it is. But DDoS attacks to EU or the US aren't launched from China/Africa anyway. You need relatively low capacity to start an amplification attack, so a server at some ISP which doesn't care is enough. There are some ISPs which knowingly allow this, like Ecatel in The Netherlands which is probably the most notorious example.