> What about mapping it by something more relevant to the structure > of the network like say, ASNs? > And filtering on ASN-basis is straightforward if you have loose RPF deployed. Just filter the inbound announcements from a specific AS and all traffic will be dropped automatically. Pete