RE: Source addresses, DDoS prevention and ingress filtering

[Michael Thomas]

Glenn Morrow writes:
 > If the node behind the MR obtained its home address from the  the mobile
 > router's subnet, then the MN will use this as the source i.e. the MN's home
 > subnet is the MR's subnet.

   Right, but when the MR's upstream router does an
   RPF check... it will drop the SN's packets.

 > Either way (tunneling or subnet translation), the topological correctness is
 > still maintained.

   Well, that's sort of the problem. The SN doesn't
   know that it's putting topologically incorrect
   source address in the IP header.

                  Mike
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------