> > Ah, but I think the issue is who the victims are. If *I* add > > protection in my network, that does *not* guarantee I won't > > be hit by reflection attacks from someone's network that only > > has regular ingress filtering (without the stateful and AAA > > patches). > > you mean stateful or AAA patches, right?
I believe the AAA-assisted ingress filtering has to be stateful, or? Otherwise you'd be asking for the right home address per packet. Jari -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to [EMAIL PROTECTED] --------------------------------------------------------------------
