Jari Arkko wrote: > > > > Ah, but I think the issue is who the victims are. If *I* add > > > protection in my network, that does *not* guarantee I won't > > > be hit by reflection attacks from someone's network that only > > > has regular ingress filtering (without the stateful and AAA > > > patches). > > > > you mean stateful or AAA patches, right? > > I believe the AAA-assisted ingress filtering has to be > stateful, or? Otherwise you'd be asking for the right home > address per packet.
Actually I was trying to say AAA or 'some kind of network access control'. ofcourse both are stateful. sorry about that. Vijay > > Jari -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to [EMAIL PROTECTED] --------------------------------------------------------------------