[atlas] [Fwd: [mat-wg] [Fwd: Community suggestion for ATLAS spoof test]]

Dear RIPE Atlas people,

please take a look at this proposal,
and discuss on the mat-wg mailing list.

Thanks,
Vesna

-------- Original Message --------
Subject: [mat-wg] [Fwd: Community suggestion for ATLAS spoof test]
Date: Wed, 15 May 2013 22:37:28 +0100
From: Vesna Manojlovic <BECHA at ripe.net>
To: Measurement Analysis and Tools Working Group <mat-wg at ripe.net>

Dear colleagues,

please take a look at the suggestion from Alexander Isavnin.

Since he is here in Dublin, we can talk about it during MAT-WG
or, if there is not enough time, at the RIPE Atlas community BoF.

However, the opinion of the rest of the community counts too,
so I ask you to comment on the mailing list, if you are interested.

Regards,
Vesna

-------- Original Message --------
Subject: Community suggestion for ATLAS spoof test
Date: Wed, 15 May 2013 21:16:30 +0200
From: Alexander Isavnin <isavnin at netline.ru>
To: Vesna Manojlovic <BECHA at ripe.net>

Dear Vesna!

Could you forward this suggestion to mat-wg mailing list (and other
appropriate lists).

Due to high requirements to mitigate spoofing there is need to detect one.

RIPE community have great distributed networking tool - ATLAS.

As first step i suggest to select address from RIPE NCC network and
allow all probes (if probe is not behind NAT) to send spoofed packet
with this address as source.
As first and a half step - allow to send packets with source addresses
of anchors (if anchor's host agrees)
As second step - allow probe host to permit use his address as spoofed
source.

Best regards,
Alexander Isavnin