RE: [PHP] ip adress spoofing

Thanks Sylwester and Teodor, I also thought you couldn't, but just wanted to be sure about it :) Though I'm not quite familliar with the technicalities of the packets, I guess it also wouldn't be possible to spoof a get request in general? You first have to create a connection before you can send any HTTP requests to a webserver and therefore you can't spoof your IP adress, right? Grtz, dowebwedo Jeroen Wesbeek .programming St. Jacobsstraat 16 Postbus 448 | 3500 AK Utrecht The Netherlands p 030 2348110 | f 030 2348605 [roses are red, violets are blue, I am schizophrenic and so am I ] -----Original Message----- From: Sylwester Zarebski [mailto:sylwek@isp.net.pl] Sent: donderdag 9 november 2000 15:19 To: PHP general list Subject: Re: [PHP] ip adress spoofing Jeroen Wesbeek wrote: > > Hello :) Hi :-) > I've got a question. It is not so hard to fake HTTP headers, > but I don't know how you could spoof your IP adress using php. > Is it possible to do a HTTP request and spoof your IP adress so > your IP won't show up in $REMOTE_ADDR ? > The downside is that you won't receive any data back but that > doesn't mind. > I just want to know if it's possible and if so, how it can be > done... I wonder... :) It isn't possible in PHP to make TCP connection with spoofed IP address. Let me explain some technical: if you sent IP spoofed SYN packet to some host, ACK packet do not return to you to make connection. Of course you can magically send packets, but you do not get back any ACK packet, and you have to play with lowest level of network communication. This can't be done with PHP. -- pozdrawiam.. ## ## | Sylwester Zarębski - ISP Group | #### ## | e-mail: sylwek@isp.net.pl | ## ## ## | ICQ uin: #45780888 | ## #### ## | Administrator ISP.NET.PL | -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net