IP packets with source IP 127.0.0.1 will bypass protection.
vulners.com/securityvulns/securityvulns:doc:3492