RE: [PHP] IP spoof

> I keep reading that an ip address is "too easy to spoof" and that is why > it shouldn't be relied on for most things... So I am wondering, if it's > so easy, how do you do it? How could I make a request to my document and > make the access appear in the apache_log file as if it was from an IP > address I specify? or is it not that easy after all? No, you can't really spoof an IP...even though it is theoretically possible it would be useless... Example: Your real ip is: 111.222.333.444 You spoof your IP: 222.333.444.111 You connect to my machine I receive a TCP packet Packing incoming: 222.333.444.111 Packet Info :Foo bar My server then sends an acknowledgement to 222.333.444.111 Since you're NOT 222.333.444.111, you'll never get that acknowledgement... So your system assumes I'm not currently online. IP spoofing is really only an option for people looking to do a Denial of Server (DoS) attack and don't want to be traced (packets however usually also contain the hardware address of the NiC sending out the packet so you're not 100% invisible...unless of course you spoof that too). Of course you can hide your IP by going through proxy servers or by using someone else's system as an internet gateway...and a few other ways. HTTP_REFERER is the easy thing to spoof :) IP addresses are a reliable way (IMO) of identifying an individual. (Comments and criticsm are welcome :D) Sincerely, Craig Vincent ------------------------- Senior Programmer Jazzmonkey Media Inc. http://www.jazzmonkey.com ------------------------- > > Anyway, I am curious how this would be done.. > > > Thanks, > > ..rick > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net