[musicale]

Ideally the ISP does basic ingress policing and doesn't accept packets from source addresses outside its range.

Yes, I know most ISPs don't do this. But they could if they wanted to.