In your previous mail you wrote:

   This entire question is being begged by
   multihoming which RPF checks fail at pretty
   miserably. And of course, asymmetric routes. We
   need something better. Essentially, I think what
   I'm proposing is something in lieu of RPF
   checks. The open question is whether we can make
   this pervasive too. If we can, we can safely turn
   off RPF checks.
   
=> the idea that RPF checks always fail with multihoming is a myth
(cf http://www.cisco.com/public/cons/isp/documents/uRPF_Enhancement.pdf).

Regards

[EMAIL PROTECTED]

PS: don't forget we don't need an absolute reply to source address
spoofing, in fact it seems that with the current deployment of
ingress filtering, random source address spoofing is enough unattractive.
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to