So I've read that a common attack is spoofing packets from internal SRC IP addresses, such as
192.168.0.0/16. How can I defend against this with iptables, yet at the same time allow traffic from the router or anything else essential?
If I just added a
-s 192.168.0.0/16 -j DROP to the INPUT chain that would kill genuine internal traffic too?