[c-nsp] DNS amplification

[Phil Mayers]

On 18/03/13 12:04, Dobbins, Roland wrote:
>
> On Mar 18, 2013, at 6:01 PM, Phil Mayers wrote:
>
>> I'm not hugely sure what QoS has to do with BCP 38, but ACL- and
>> RPF-dropped flows have output interface of 0 on sup720, IME.
>
> Only for punted traffic.  Traffic dropped in hardware never makes it
> into the mls table.

Really? You sure about that? In that case, what is "mls exclude 
acl-deny" for?