SSCP: Systems Security Certified Practitioner

A firewall protecting an internal network normally permits authorized outbound packets whose destination IP address is external, allowing internal hosts to communicate with outside networks. In contrast, inbound packets using an internal source address are spoofed and should be filtered; ingress filtering is a Best Current Practice for preventing forged source addresses.