Ahem A Rivet's Shot wrote:

> The Natural Philosopher wrote:
>
>> yes BUT your way involves spoofing internal source addresses on an
>> external interface.
>> In short a compromised ISP
>
> Network security should be based on the assumption that everything
> you don't control is potentially hostile.

So drop all spoofed packets arriving at the external interface.

--- SoupGate-Win32 v1.05