BCP38 - Internet Death Penalty

Wed Mar 27 01:43:38 UTC 2013

----- Original Message -----
> From: "Mark Andrews" <marka at isc.org>

> If you are with a ISP that does not practice BCP 38 are you willing
> to risk your neck that you won't be subject to a "aiding and abetting"
> charge? All of us here know that spoofing address like this is a
> criminal activity. We are all experts in the field and the courts
> apply higher standards to us than they do to Joe Blogs. We know
> machines get compromised. We know how to block spoofed traffic
> from compromised machines.

Careful: source address spoofing, like using a name you don't have on your
driver license *is not inherently a crime*.  *Fraudulent behaviour which
is advanced thereby* makes it an additional crime.

SAS is sometimes necessary for testing.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA               #natog                      +1 727 647 1274