CertiGuide to Security+  9  Chapter 1:  General Security Concepts (Domain 1.0; 30%)       9  1.4  Attacks            9  1.4.3  Spoofing

Types of Spoofing 1 1.4.4  Man in the Middle

To help prevent against spoofing attacks being successful on your own network, set up a router filter that does not allow outside packets whose source address is set to a host in one of your internal networks, into your network. This will catch most (some?) spoofing attempts originating outside your network, directed toward your network. It will not catch attempts made from inside your network (spoofing the address of another internal host, perhaps in an attempt to gain privileges), or attempts made against a third party’s network in which your network is listed as the origin of the attack in the source IP address.

Additionally, you should also filter outbound packets, ensuring that no packets with a source IP address that is not within your network are allowed to leave it – a malicious user is likely spoofing such packets. (If everyone did this, the spoofing problem would largely disappear. The fact that spoofing is still an issue clearly demonstrates that, amazingly, years after spoofing first became a common occurrence, not everyone has gotten around to this yet.)

Types of Spoofing 1 1.4.4  Man in the Middle