Re: Tracking stealth portscan/pepsi attacks

As a side note, does anybody use anything to prevent address spoofing in their network? That would at prevent a lot of attacks completly and make tracing the rest much easier.

-- Leigh

I think that a serious provider *should* prevent address spoofing. This is a simple filter in the access router. If this is not done, how can an ISP prove that a customer has done something wrong. I think this for protection of the ISP as well as other customers. Fredrik Johansson