*BSD News Article 52177


Return to BSD News archive

#! rnews 1252 bsd
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.uwa.edu.au!classic.iinet.com.au!swing.iinet.net.au!news.uoregon.edu!news.sprintlink.net!in1.uu.net!news1.digital.com!nntp-hub2.barrnet.net!parc!fenner
From: fenner@parc.xerox.com (Bill Fenner)
Newsgroups: comp.unix.bsd.freebsd.misc,comp.protocols.tcp-ip
Subject: Re: Faking Source IP Addresses?
Date: 26 Sep 1995 15:27:56 GMT
Organization: Xerox Palo Alto Research Center
Lines: 13
Message-ID: <44965s$68d@news.parc.xerox.com>
References: <43te4l$ug@galaxy.ee.rochester.edu>
NNTP-Posting-Host: crevenia.parc.xerox.com
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:6820 comp.protocols.tcp-ip:39349

In article <43te4l$ug@galaxy.ee.rochester.edu>,
Manu Iyengar <iyengar@galaxy.ee.rochester.edu> wrote:
>Out of curiosity: could a _user-level_ process send a packet claiming to be
>from some arbitrary IP address (not its own)?

Yes, set IP_HDRINCL.  You can fake IP addresses starting with Net/2; you
can't in SunOS (it silently sets the "proper" source address for you).

You could also use one of the "tun" interfaces, which let you write
fully-formed packets to them (but in this case, the packet will have
*arrived* on an interface, not be transmitted.)

  Bill