[conspire] Fighting DDoS extortion

[Rick Moen]

Quoting Don Marti (dmarti at zgp.org):

> No, there's more to the story than that.  The DDoS
> packets are typically spoofed.
> 
> http://grc.com/dos/winxp.htm

I'd forgotten that.  

Unless I'm missing something, it indicates gross incompetence (or
collusion) on the part of whoever's setting up the ISP routers:  They're
supposed to drop packets arriving on the inside interfaces bearing
foreign source IPs, aren't they?  Mine always do.