sbs 2011 network diagram ip address

What is the correct anti-spoofing setting on interface ETH1 in this network diagram?