One would hope the backbones aren't passing 255.255.255.255 around to come in via his Internet connection You would be surprised at the *source* addresses on packets that hit some of my borders:

[typical 1918 addresses clipped] deny ip 127.0.0.0 0.255.255.255 any (56 matches) deny ip host 0.0.0.0 any (1818 matches) I find source 0/0 to be truly entertaining. Cheers, Joe -- Joe Provo, Network Architect 508.229.8400 x3006 Network Operations Center Fax 508.229.2375 UltraNet Communications, Inc. <jprovo@ultra.net>