IP spoofing

[Ben A Lindstrom <mouring @ netnet . net>]

Is there any documentation on how this is done, and the most comment way 
of foiling this.  I'm going to be "rolling my own firewall" and I need to 
know how someone can "claim" to be an internal machine and still have the 
packets return correctly.

Thanks.