[SpamCop-Geeks] Re: How is this IP addy possible?
YoKenny
spamcop-geeks
Fri, 7 Sep 2001 12:27:18 -0400
"Simon Matthews" <simon> wrote in message
news:3B97C03A.5176D403
> Jonathon,
>
> No, I'm sorry, you are not correct here.
>
> A computer can send out a packet with any source address, and unless the
> ISP is filtering outgoing packets (unlikely), it will be delivered to the
> destination address.-- however, if the source address is wrong, it will
not
> receive any replies.
>
> There are various levels of difficulty in sending out a packet with such a
> source address, depending on the OS. Most *nix OSes allow aliases IP
> addresses: one ethernet port can have multiple IP addresses, making it
very
> easy to sned out such packets.
>
> NT4, W2k and WinXP have TCP/IP stacks that allow raw sockets. Raw sockets
> can be used to send out packets with fake source addresses.
For a good disiscussion of Raw sockets go to:
http://grc.com/dos/sockettome.htm and news.grc.com newsgroups
grc.sockettome (closed), grc.spoofarino
--
YoKenny
For people who like peace and quiet: a phoneless cord
Help fight spam http://spamcop.net http://www.cauce.org/