Reply to thread

Message

<blockquote data-quote="ForgottenSeer 97327" data-source="post: 1032786">Questions 1 and 3 yes, you always should enable them (must haves advanced protection)Without going into details IPv4 with NAT and SPI offers the same level of security as IPv6 Simple Security. When you see these options, you should enable them. These are the options which make your router a firewall.Questions 2 and 4 yes it is good to enable them (nice to have extra network boundary protection)Anti-spoof protection in laymans terms it protects the boundary of you network by dropping traffic related to stuff you use behind the firewall on the inside of your home network when it is coming from the outside of your network, there are several spoofs possible, this one explains IP-spoofing very clearly (<a href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Preventing-IP-Spoofing.htm#:~:text=Anti%2DSpoofing%20detects%20if%20a,Anti%2DSpoofing%20blocks%20that%20packet." target="_blank">link</a>)<a href="https://www.techtarget.com/searchnetworking/definition/ingress-filtering" target="_blank">IPv6 Ingress filtering</a> also protects the boundary of your network for IPv6</blockquote>

[QUOTE="ForgottenSeer 97327, post: 1032786"] [B]Questions 1 and 3 yes, you always should enable them (must haves advanced protection)[/B] Without going into details IPv4 with NAT and SPI offers the same level of security as IPv6 Simple Security. When you see these options, you should enable them. These are the options which make your router a firewall. [B]Questions 2 and 4 yes it is good to enable them (nice to have extra network boundary protection)[/B] Anti-spoof protection in laymans terms it protects the boundary of you network by dropping traffic related to stuff you use behind the firewall on the inside of your home network when it is coming from the outside of your network, there are several spoofs possible, this one explains IP-spoofing very clearly ([URL='https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Preventing-IP-Spoofing.htm#:~:text=Anti%2DSpoofing%20detects%20if%20a,Anti%2DSpoofing%20blocks%20that%20packet.']link[/URL]) [URL='https://www.techtarget.com/searchnetworking/definition/ingress-filtering']IPv6 Ingress filtering[/URL] also protects the boundary of your network for IPv6 [/QUOTE]

Verification