What Can a Stateless Firewall Protect Against?

• Some source address spoofing

• Revealing useful information in response to port scans

• Malformed broadcast packets used to identify UNIX systems

• Some forms of network mapping

• Some Denial of Service attacks

• Source routed packets

• Some forms of fragmentation bombs used to bypass firewalls

• Protecting remote sites from mistakes on your end

• Access to private LAN services

• Providing additional protection against local server misconfigurations

Notes: