We filter packets sourced from our own netblocks, but only for single-homed values of "our own." We don't filter portions of our aggregates that are assigned to customers. Customers with generic routing policies still need to reach your network via the Internet occasionally, like when their circuit to you goes down. Troy