>I don't see how you can filter packets with spoofed *source* addresses >that are generated outside your network unless the addresses are your >own. You're absolutely correct. I was talking about our own addresses not the case of someone spoofing your address to me. My bad for not being clear. -r.