Alan Cox provides a simple solution to the forged user packets issue.

"Therefore anyone can set PPP line discipline on a tty under his control and sent forged datagrams right into the kernel network subsystem..." "Just copy the 2.2 fix - stop the ldisc open, that enforces what you need."