•Packets with the organization’s IP address as the source address. IP packets sent form one internal employee to another usually do not need to be routed over the Internet. Thus, any packet arriving from the Internet with an internal address in the source IP address field likely represents an attempt to spoof the recipient about its origin and, therefore, should not be allowed entry.