Packet Filtering Attacks

• IP address spoofing – packets from the outside have internal addresses in their source IP address field

• Source routing attacks – route of packet is specified to bypass security measures

• Tiny fragment attack – designed to circumvent filtering rules that depend on TCP header information