Hm. And how quickly do you think all of the reachable hosts in the
world are patched? I would suggest that ingress filtering is, by far,
less resource intensive, since the numbers of routers v. hosts are
much, much smaller.
In any event, I believe ingress filtering is certainly a Good Thing.
Also, what progress has been made in hardening OS's for UDP flooding?
- paul