Quote:
|
Originally Posted by altis
1) Is the sender trying to achieve anything other than tie my router in knots (and if so, how can they expect a reply)?
|
They certainly will not get a reply to the probe. The intention of the probe might be Denial of Service (crash the router), or maybe a carefully crafted probe, causing the router to reply to its own web configuration interface, might disable the router's security settings so that a later probe could take control of it. If such a thing were possible, it would likely be specific to one model of router.
Quote:
|
2) Should NTL be passing me packets that have so obviously been spoofed?
|
It's debatable what ISPs should or should not be doing in this area. NTL have started blocking certain ports which are commonly used by malicious probes, it would be a small extra step to filter out probes from obviously bogus source addresses. But the onus is really on the end-user to protect themselves, and no-one should rely on an ISP to do it for them (as a child might rely on a nanny). NTL's port-blocking can be seen as more of an attempt to prevent their network being overrun by worms, as much as an attempt to help the home user.