🚀 go-pugleaf

Lots  of  people  appear  to  be  thinking  that  a  verification  of IP
addresses, e.g., in the case of SMTP is not necessary.  I  am  not  sure
whether  and  where  this  was  already  discussed before, but I get the
impression that the proliferation of low cost workstations connected to,
say,  campus  computer  networks  might change our minds in two to three
years in an environment where  most  of  the  power  (besides  parts  of
routing)  will  go  to  these hosts. I presume that this will be a newly
evolving problem which could not easily show up so  far.  What  are  the
suggested measures against faked message headers in that case? IP source
verification? Something else? Or is this considered to be no problem  at
all?

            -- Hans-Werner