A network operator can implement an anti-spoofing access-list filter to prevent packets with incorrect source IP addresses from entering and leaving the network. With the following command, the access list will prevent incoming packets that have the internal IP address from coming in. 220.x.x.x is a network which I own, so I do not expect to encounter any packets coming from outside my own IP address.
Cisco IOS command:
access-list 101 deny 220.x.x.0 0.0.0.255 any
Get Practical Network Scanning now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.
Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.
Start your free trial Become a member now