In all instances, the Intra2net system ensures that local IP addresses can only access the Intra2net system using the appropriate LAN interfaces. If a packet with a source address comes in from one of the local networks via the Internet, it is rejected immediately.

The "Prevent spoofing of IP addresses in the local network" option can also be used to ensure that, in the case of multiple routings in the local network, the packets are not allowed to arrive at the Intra2net system via any LAN interfaces, but only via those selected using the gateway routing IP.