Filtering by IP Header

• Block outward access by discarding all packets with IP destination address external to organisation
• Block inward access by discarding all packets with IP source address external to organisation
• Fragmentation of IP packets makes it harder to filter on packet data information