Re: IP spoof
| From: | Simon Edwards | Date: | Thu, 17 Aug 2000 00:02:20 +0000 |
| Subject: | Re: IP spoof | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-12127@lists.php.net to get a copy of this message | ||
"rick - SomersNet, Inc." wrote:
> We run a link exchange that tracks unique IP's for display count and
> clicks. However I am almost positive that there are people cheating by
> feeding the system IP addresses and referrers. I am 99% sure people are
> doing it, the thing is how? I need to find out how to do it myself so I
> can implement counter measures against it. Is this something that can be
> done in PHP?
Be aware that people connecting via proxies will appear to have the
proxies' IP address. So you should expect to see some proxy IPs appear a
lot more often. I think a lot of proxies send a header explaining which
IP it is forwarding for to. Proxies are also now a lot more common that
what your browser setting might suggest. A lot of ISP these days are
doing transparent proxying where the browser doesn't need to specify a
proxy address. The ISP will just redirect port 80 traffic on the TCP
level and direct it through thier proxy server.
'Referrer' headers are the easiest to change, and really can't be
trusted much. Web filtering proxies like Junkbuster often change or
delete the referrer header.
--
Simon Edwards
Animated Design, Melbourne
http://www.animated.net.au/ Ph: (03) 98850990