Oops! I guess I'm way behind the times.
For quite a while, I've been using ip verify unicast reverse-path
to prevent packets with spoofed source addresses from crossing my routers. Apparently, as of IOS 12.0 (12.4 is current as of this writing), that command has been replaced with …