[Jweb_Guru]

> Why wouldn't every device on the internet just spoof their IP if it was this obvious thing?

https://spoofer.caida.org/summary.php - compromise a device in one of the ASes not marked "unspoofable." Those ASes do not consistently perform packet ingress filtering.

That's not to say that DDOS attacks stop being possible, but at least they become traceable.

[shaunol]

I appreciate the response. I had no idea things were this bad.

[x0]

Thank you, I've actually been interested in the answer to this question for many years! Never was able to solve it via googling.