Vadim writes, >On itself, LSRR is a godsend to hackers (i can think of about >a dozen of very nasty attacks using general LSRR). The only >useful application for it is traceroute. > >Why don't router vendors provide an option to turn it >off for everything but ICMP ECHO? Personally I find this an excellent suggestion. g