Preventing forged packets from you to outside world
-
you might know all the IP addresses that are used in your
AS
- if your connections to the outside world and your transit
arrangements are not too complicated
-
make a filter that denies other source addresses
-
apply that filter to all links from you to other Ases