Reply to: IP address from forum posts?

[Contreras]

How do you spoof an IP? It's a two way transaction so say your real IP is 200.12.12.12 and you connect with 150.11.11.11 but spoof as 100.13.13.13, surely 150.11.11.11 will send packets back to 100.13.13.13 and not to 200.12.12.12 since you are likely to be subnetted out?

I've never understood how that works!

It's impractical, for the reason you describe. It's of course easy to spoof a source address but then you wouldn't see the reply. The 3-way handshake needed to establish a TCP connection therfore becomes 'difficult'. As I understand it requires weaknesses in the network stack to succeed and any half-decent implementation will be hardened against this. Assuming you could get through "transmitting blind" so to speak, then that may be just enough to inject an attack, open a back door, etc. so theoretically possible but posting on CUK would be far fetched.

UDP though, without the 3-way handshake, would at least get past the network stack so it's up to the application make its own defence against spoofed IPs. One form of DDoS attack is to spoof the victims IP as the source address in a DNS lookup request (small UDP packet) sent to multiple DNS servers which then unwittingly each send DNS replies (larger UDP packet) to the victim and anonymising the attacker in the process.

LondonManc's mention re American Netflix content in the UK isn't really 'spoofing', at least not at the protocol level. It's bouncing traffic via a proxy, either a 3rd party managed service, or something you set up on a private server, the later being entirely feasible to cover a sockie's tracks but if going to those lengths you really would need to get out more.

[WTFH]

Unless you're a proper techie with a dedicated range of IPs...

"Range of IPs" = epic fail.

[v8gaz]

It will point to the IP address your ISP has given your connection at the time. They don't change that often - maybe once every few months depending on the ISP, or when you reboot your router.

Unless you're a proper techie with a dedicated range of IPs...

[Bee]

I do wish you'd get a spelling checker at the very least. Why not post in the Technical forum to see if someone can suggest one.

Done.

Anything else, my love?

[northernladuk]

No, I'm a twelve-foot piranha bee, a giant vilain who invaded the CUK.

I do wish you'd get a spelling checker at the very least. Why not post in the Technical forum to see if someone can suggest one.

[Bee]

Twelve-foot? Are you sure you're not just two piranha bees?

No, I'm a twelve-foot piranha bee, a giant villain who invaded the CUK.

[NotAllThere]

No, I'm a twelve-foot piranha bee.

Twelve-foot? Are you sure you're not just two piranha bees?

[Bee]

Golgafrincham

No, I'm a twelve-foot piranha bee.

[northernladuk]

Golgafrincham

Golgafrincham - Hitchhikers - Wikia

Golgafrincham was a planet, once home to the Great Circling Poets of Arium. The descendants of these poets made up tales of impending doom about the planet.

Sounds like we've got a couple of posters in General from there as well..

These tales of impending doom allowed the Golgafrinchans to rid themselves of an entire useless third of their population. The story was that they would build three Ark ships. Into the A ship would go all the leaders, scientists and other high achievers. The C ship would contain all the people who made things and did things, and the B ark would hold everyone else, such as hairdressers, telephone sanitizers and SASGuru. They sent the B ship off first, but of course the other two-thirds of the population stayed on the planet and lived full, rich and happy lives until they were all wiped out by a virulent disease contracted from a dirty telephone.

FTFY

[NotAllThere]

... I wonder where Bee's IP says he is.

Golgafrincham

[northernladuk]

I put the word too short.

I mean Surfweb = Surface Web.
I'm sorry about the confusion.

What about the rest of it?

[Bee]

I'm guessing surfweb = internet.

I put the word too short.

I mean Surfweb = Surface Web.
I'm sorry about the confusion.

[WTFH]

Nigeria or local NAT?

Are you outing Bee as NAT's sockie?




(yes)

[stek]

I thought Bee was a she. (from Miami, FLA)


But anyway, Bee's IP address is either 41.184.155.127 or 192.168.1.69

Nigeria or local NAT?

[WTFH]

I wonder where Bee's IP says he is.

I thought Bee was a she. (from Miami, FLA)


But anyway, Bee's IP address is either 41.184.155.127 or 192.168.1.69