Packets with spoofed IP addresses are more difficult to filter since each spoofed packet appears to come from a different address, and they hide the true source of the attack.
伪造IP地址的数据报过滤更困难，因为每个伪造数据报是来自一个不同的地址，他们隐藏攻击的真正来源。