North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: ICMP rate limiting on EGRESS (Warning, operational content inside)

  • From: Sean Donelan
  • Date: Mon Jan 17 11:09:41 2000 
On Mon, 17 January 2000, [email protected] wrote:
> Source routing and connection based services are creaping into
> the Internet, slowly but surely.  Both are a far cry from the 
> destination forwarding and connectionless service that I grew
> up with.

Yes, but as far as I know, none of the new services rely on the ability
to spoof the source address outside of local (perhaps VPN extended) network.
Even old services such as roaming and redirector applications have switched
to using tunnels instead of spoofed source addresses.

Are there any real-world applications which have no alternative but to
use spoofed source addresses on the Internet at large?

Or is this a case, if we had thought about it, we would have prohibited
it at the start; but now its in the wild we don't know how to get it back
in the barn.