New Denial of Service Attack on Panix

Hm. And how quickly do you think all of the reachable hosts in the
world are patched? I would suggest that ingress filtering is, by far,
less resource intensive, since the numbers of routers v. hosts are
much, much smaller.

In any event, I believe ingress filtering is certainly a Good Thing.

Also, what progress has been made in hardening OS's for UDP flooding?

- paul