Tracking stealth portscan/pepsi attacks

Hi,

On Thu, Sep 02, 1999 at 11:28:55AM +0200, Jonas Luster wrote:
> > As a side note, does anybody use anything to prevent address spoofing in their
> > network? That would at prevent a lot of attacks completly and make tracing the
> > rest much easier.
> 
> We're in a switched network so Spoofing is only possible by
> ARP-Hijackiking. 

Oh?  That's not how I understand the benefits of switching...

How do you prevent somone from injecting packets with spoofed source
address at your boundary routers?

Gert Doering
        -- NetMaster
-- 
SpaceNet GmbH               Mail: netmaster at Space.Net
Joseph-Dollinger-Bogen 14   Tel : +49-89-32356-0
80807 Muenchen              Fax : +49-89-32356-299