Leythos <void@nowhere.lan> wrote:
> And you're wrong - the point of the router is to block IN-BOUND traffic
> as that's what mostly causes problems for users.

The problems I'm referencing are spoofed source addresses,
which seem to come from inside, and are not blocked because the filtering
rules misinterpret the packets as not from the outside, and b0rken FTP
inspection, which leads into making traffic possible again.

Both are problems with blocking what you're calling "in-bound traffic".

Yours,
VB.
--
MAC-Filtering bringt so viel Schutz vor "Hackern" wie Zeitungspapier vor
einer Atombome. (MAC filtering is protecting against "hackers" like newsprint
is protecting against a nuclear bomb)
- Christian Forler in de.comp.security.misc