Spoofers love send data from random ports, but legit ports by default is 27005 (27006 in rare) We can make option to drop packets from unexpected ports (applications)