Re: Response to door knocking

[Ulrich Flegel <Ulrich.Flegel () CS Uni-Dortmund DE>]

> > > > > "Robert" == Robert Graham <robert_david_graham () yahoo com> writes:

    Robert> Assuming that you take care of the obvious pathalogical
    Robert> cases (be careful about false positives, IP spoofing, and
    Robert> throttling the rate at which you send such messages,
    Robert> etc.), are there any problems with this scheme?

You name them. Unmasking IP spoofing without cooperating
routers/sniffers upsream to the alleged agressor I don't see how you
want to discern real IPs from spoofed IPs. In worst case the attacker
uses you to attack someone else.

Just my 2 cents,
 Ulrich Flegel