&gt; Closing your ports doesn&#x27;t solve this, it just hides the problem under the rug, and breaks the Internet in the process.<p>To be fair, if you don&#x27;t listen to tin-foil-hatters like GRC and configure your firewalls to REJECT non-invalid [0] traffic, rather than DROP, the only thing you&#x27;ll break is the ability for others outside your network to connect to services on those ports.<p>[0] In the iptables CONNTRACK sense of &quot;invalid&quot;.