I think that to filter decreasing non-monotonic IPv4 connections is the best filter to apply.The only ones to maybe authorize seems to be decreasing monotonic IPv4 connections.I did not check what could be the correct connections in IPv6 (the ones with only 6 parts seems to be the only ones which should exist in IPv6)."You" are not welcome.