What do you require your customers and peers to do, and not do? Can the spam? Forge source addresses? Inject routes they don't own? If not, why not? What else? Come by and talk with your, um, peers about it and the results will be presented on Tuesday.