Re: IP spoof

Hello, thanks for responding.. We run a link exchange that tracks unique IP's for display count and clicks. However I am almost positive that there are people cheating by feeding the system IP addresses and referrers. I am 99% sure people are doing it, the thing is how? I need to find out how to do it myself so I can implement counter measures against it. Is this something that can be done in PHP? Thanks, ..rick Craig Vincent wrote: > > > I keep reading that an ip address is "too easy to spoof" and that is why > > it shouldn't be relied on for most things... So I am wondering, if it's > > so easy, how do you do it? How could I make a request to my document and > > make the access appear in the apache_log file as if it was from an IP > > address I specify? or is it not that easy after all? > > No, you can't really spoof an IP...even though it is theoretically possible > it would be useless... > > Example: > > Your real ip is: 111.222.333.444 > You spoof your IP: 222.333.444.111 > > You connect to my machine > > I receive a TCP packet > > Packing incoming: 222.333.444.111 > Packet Info :Foo bar > > My server then sends an acknowledgement to > 222.333.444.111 > > Since you're NOT 222.333.444.111, you'll never get that acknowledgement... > So your system assumes I'm not currently online. > > IP spoofing is really only an option for people looking to do a Denial of > Server (DoS) attack and don't want to be traced (packets however usually > also contain the hardware address of the NiC sending out the packet so > you're not 100% invisible...unless of course you spoof that too). Of course > you can hide your IP by going through proxy servers or by using someone > else's system as an internet gateway...and a few other ways. > > HTTP_REFERER is the easy thing to spoof :) IP addresses are a reliable way > (IMO) of identifying an individual. (Comments and criticsm are welcome :D) > > Sincerely, > > Craig Vincent > ------------------------- > Senior Programmer > Jazzmonkey Media Inc. > http://www.jazzmonkey.com > ------------------------- > > > > > Anyway, I am curious how this would be done.. > > > > > > Thanks, > > > > ..rick > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net