The forgery of source IP addresses, called IP spoofing, is commonly
exploited to launch damaging denial-of-service (DoS) attacks in the
Internet. Currently proposed spoofing prevention approaches either
focus on protecting only the target of such attacks and not the
routing fabric used to forward spoofed packets, or fail under
commonly occurring situations like path asymmetry. We will presents
a hop-wise packet marking approach that equips the routers to drop
spoofed packets close to their origination. Our approach has utmost
concern for immediate deployability and simulations show that it
dramatically reduces the amount of spoofing possible even under
partial deployment.