Gregory's ServerRe:
"seem to use the TTL as a lazy, easy way to restrict the use of their network to devices they (mostly) control. "
As an experienced ProdSec practioner, and I mean this as a joke, only "not" because I've seen scarier assumptions made by dev teams over the years...
So I wonder if I set TTL to 70 if they will interpret it as unrestricted 'internal' traffic (and slip past network security checks) 🫣🤪