Re: New Internet-draft on DDOS defense...

["Steven M. Bellovin" <smb () research att com>]

In message <Pine.LNX.3.96.1000512075212.812B-100000 () ogre atl netrail net>, Bran
don Ross writes:
> On Thu, 11 May 2000, Owen DeLong wrote:
>
> > Right answer, wrong reason.  The originating host will be easy to identify
> > because the MAC address of the originating machine of the ECHO-REQUEST
> > packets will be contained in the packets.
>
> I have to strongly disagree, MAC addresses don't make it across router
> boundaries, source IP addresses do.

Besides, MAC addresses are quite often changeable.

                --Steve Bellovin