You are the network administrator for a large company.

(a) Your company will be held liable for any spoofing attacks that originate from within your network (i.e., packets leaving your network with spoofed IP header informa- tion). What can you do to prevent spoofing attacks by your own employees?

You now want to evaluate the risk your employees face from spoofed IP packets origi- nating from outside the network.

(b) Assess the likelihood and dangers of spoofed IP packets that use TCP as the trans- port layer protocol. What applications might be vulnerable to such an attack? How does this change with UDP?

(c) What can be done to prevent parties outside your network from sending your em- ployees spoofed traffic that impersonates your own employees.
(d) (Optional) Now consider that your network has multiple links to the internet. Is there anything you can do to reduce the possibility of outsiders successfully sending your employees spoofed packets?