l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
December 2: Social gathering
Next Installfest:
TBD
Latest News:
Nov. 18: Club officer elections
Page last updated:
2004 Mar 03 11:57

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] Viruses
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] Viruses



On Wed, 3 Mar 2004, Ryan wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Wednesday 03 March 2004 11:10 am, Danny Webster 
> dpwebster-at-basiclabinc.com |lugod| wrote:
> > Pete,
> >
> > Good to know.  What about the IP address, you can't even trust that can you
> > with IP spoofing can you?
> 
> You can't spoof a TCP connection over the internet because of routing.

"Because of routing"?  I would say that it is exactly because of routing
that it _can_ be done... but it requires either control over at least one
router in the normal routing path (to setup a temporary host route), or at
least control over a host located along that route combined with a lot of
work to synthesize and inject the appropriate packets into the route.  It
is a _lot_ easier to spoof email than to spoof TCP, though... I usually
trust IP numbers found in Received From: headers down to the first
untrustworthy MTA.

It has also proven possible to fool certain implementations of TCP/IP to
originate a TCP spoof from somewhere off the normal routing path between
the target and the spoofed IP. [1]

[1] http://www.spirit.com/Network/net0501.html

---------------------------------------------------------------------------
Jeff Newmiller                        The     .....       .....  Go Live...
DCN:<jdnewmil@dcn.davis.ca.us>        Basics: ##.#.       ##.#.  Live Go...
                                      Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/Batteries            O.O#.       #.O#.  with
/Software/Embedded Controllers)               .OO#.       .OO#.  rocks...2k
---------------------------------------------------------------------------

_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
EDGE Tech Corp.
For donating some give-aways for our meetings.