Tracking stealth portscan/pepsi attacks

In message <37CE4706.3B3D44D8 at insnet.net>, Leigh Porter writes:

>As a side note, does anybody use anything to prevent address spoofing in their
>network? That would at prevent a lot of attacks completly and make tracing the
>rest much easier.

We have egress filters, allowing only our "own" IP numbers in the
source fields.

--
Poul-Henning Kamp             FreeBSD coreteam member
phk at FreeBSD.ORG               "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!