> We discover there are so many (source) ip not belonging to our network > to go to outside. > > We can block it but don't know how to locate the source. > > Any tools can be easily found out.
http://lmgtfy.com/?q=unicast+rpf Steinar Haug, Nethelp consulting, sth...@nethelp.no
