Yes, per http://tools.ietf.org/html/bcp38 However a lot of networks do not do this.

On 9/30/2014 12:20 PM, Matt via Af wrote:
This is related to SSDP / UPNP and is a UDP amplification attack similar to
the DNS and SNMP UDP attacks. Basically someone forges an IP source on a udp
packet and sends it to port 1900 on the router and the router sends some
larger amount of data back to the forged ip.
Basically someone forges an IP source on a udp packet
Shouldn't most ISP's block packets leaving there network with
incorrect source IP's?

Reply via email to