> Speaking of BCP38, I do hope you all saw this: > > > http://www.ripe.net/ripe/maillists/archives/spoofing-tf/2007/m > sg00000.html Speaking of BCP38++, read through the document. You can see the reasons why "source checks" on the ingress of a SP's network need to go beyond the IP address. DSCP and MAC are both known checks.