Tracking stealth portscan/pepsi attacks

>> As a side note, does anybody use anything to prevent address spoofing in
>> their network? That would at prevent a lot of attacks completly and make
>> tracing the rest much easier.

RFC 2267 describes most of the measures that should be taken at the router
level. I'm not sure how many ISPs implemented everything recommended in
that document.

Regards,
Beri

.-------.
| --+-- |  Berislav Todorovic, B.Sc.E.E.     | E-mail: BERI at etf.bg.ac.yu
|  /|\     Hostmaster of the YU TLD          | 
|-(-+-)-|  School of Electrical Engineering  | Phone:  (+381-11) 3221-419
|  \|/     Bulevar Revolucije 73             |                   3218-350
| --+-- |  11000 Belgrade SERBIA, YUGOSLAVIA | Fax:    (+381-11) 3248-681
`-------' --------------------------------------------------------------------