Re: IP spoofing

[Adam Shostack <adam @ homeport . org>]

Lyndon David wrote:
| Not only would I junk and log packets claiming to be from my internal
| network but also junk and log packets that have bits set in the IP options
| header. This would not protect against SYN attacks, just make it
| more difficult for people to claim to be someone else whilst doing it.

Junking packets with options prevents people from using IPsecurity.

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume