Please help me to understand anti-spoofing in same network segment. for example :- I have 2 hosts ( Host 1:- 10.0.0.1/24 & Host 2:- 10.0.0.2/24). These both hosts reside at internal side of firewall. Firewall internal port IP:- 10.0.0.254/24. Now if Host 2 spoofed Host 1 IP address and send traffic towards outside. How anti-spoofing will work in this case. How firewall will detect this is spoofed IP-address.