Re: ICMP rate limiting on EGRESS (Warning, operational content inside)

[Sean Donelan <sean () donelan com>]

On Mon, 17 January 2000, bmanning () vacation karoshi com wrote:
> Source routing and connection based services are creaping into
> the Internet, slowly but surely.  Both are a far cry from the 
> destination forwarding and connectionless service that I grew
> up with.

Yes, but as far as I know, none of the new services rely on the ability
to spoof the source address outside of local (perhaps VPN extended) network.
Even old services such as roaming and redirector applications have switched
to using tunnels instead of spoofed source addresses.

Are there any real-world applications which have no alternative but to
use spoofed source addresses on the Internet at large?

Or is this a case, if we had thought about it, we would have prohibited
it at the start; but now its in the wild we don't know how to get it back
in the barn.