[mat-wg] [Fwd: Community suggestion for ATLAS spoof test]

Dear colleagues,

please take a look at the suggestion from Alexander Isavnin.

Since he is here in Dublin, we can talk about it during MAT-WG
or, if there is not enough time, at the RIPE Atlas community BoF.

However, the opinion of the rest of the community counts too,
so I ask you to comment on the mailing list, if you are interested.

Regards,
Vesna

-------- Original Message --------
Subject: Community suggestion for ATLAS spoof test
Date: Wed, 15 May 2013 21:16:30 +0200
From: Alexander Isavnin <isavnin at netline.ru>
To: Vesna Manojlovic <BECHA at ripe.net>

Dear Vesna!

Could you forward this suggestion to mat-wg mailing list (and other 
appropriate lists).

Due to high requirements to mitigate spoofing there is need to detect one.

RIPE community have great distributed networking tool - ATLAS.

As first step i suggest to select address from RIPE NCC network and 
allow all probes (if probe is not behind NAT) to send spoofed packet 
with this address as source.
As first and a half step - allow to send packets with source addresses 
of anchors (if anchor's host agrees)
As second step - allow probe host to permit use his address as spoofed 
source.

Best regards,
Alexander Isavnin