RE: [PHP] IP spoof

This is why in-addr.arpa exists. > -----Original Message----- > From: Craig Vincent [mailto:craig@jazzmonkey.com] > Sent: Wednesday, August 16, 2000 7:43 AM > To: rick - SomersNet, Inc.; php-general@lists.php.net > Subject: RE: [PHP] IP spoof > > > > I keep reading that an ip address is "too easy to spoof" > and that is why > > it shouldn't be relied on for most things... So I am > wondering, if it's > > so easy, how do you do it? How could I make a request to my > document and > > make the access appear in the apache_log file as if it was > from an IP > > address I specify? or is it not that easy after all? > > No, you can't really spoof an IP...even though it is > theoretically possible > it would be useless... > > Example: > > Your real ip is: 111.222.333.444 > You spoof your IP: 222.333.444.111 > > You connect to my machine > > I receive a TCP packet > > Packing incoming: 222.333.444.111 > Packet Info :Foo bar > > My server then sends an acknowledgement to > 222.333.444.111 > > Since you're NOT 222.333.444.111, you'll never get that > acknowledgement... > So your system assumes I'm not currently online. > > IP spoofing is really only an option for people looking to do > a Denial of > Server (DoS) attack and don't want to be traced (packets > however usually > also contain the hardware address of the NiC sending out the packet so > you're not 100% invisible...unless of course you spoof that > too). Of course > you can hide your IP by going through proxy servers or by > using someone > else's system as an internet gateway...and a few other ways. > > HTTP_REFERER is the easy thing to spoof :) IP addresses are > a reliable way > (IMO) of identifying an individual. (Comments and criticsm > are welcome :D) > > Sincerely, > > Craig Vincent > ------------------------- > Senior Programmer > Jazzmonkey Media Inc. > http://www.jazzmonkey.com > ------------------------- > > > > > > Anyway, I am curious how this would be done.. > > > > > > Thanks, > > > > ..rick > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: > php-list-admin@lists.php.net > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: > php-list-admin@lists.php.net