RFC 2267: Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing (1998)

by P Ferguson, D Senie