Re: ip adress spoofing

Jeroen Wesbeek wrote: > > Hello :) Hi :-) > I've got a question. It is not so hard to fake HTTP headers, > but I don't know how you could spoof your IP adress using php. > Is it possible to do a HTTP request and spoof your IP adress so > your IP won't show up in $REMOTE_ADDR ? > The downside is that you won't receive any data back but that > doesn't mind. > I just want to know if it's possible and if so, how it can be > done... I wonder... :) It isn't possible in PHP to make TCP connection with spoofed IP address. Let me explain some technical: if you sent IP spoofed SYN packet to some host, ACK packet do not return to you to make connection. Of course you can magically send packets, but you do not get back any ACK packet, and you have to play with lowest level of network communication. This can't be done with PHP. -- pozdrawiam.. ## ## | Sylwester Zarębski - ISP Group | #### ## | e-mail: sylwek@isp.net.pl | ## ## ## | ICQ uin: #45780888 | ## #### ## | Administrator ISP.NET.PL |