The spoofing tag has no wiki summary.
2
votes
6answers
108 views
How reliable are IP address-based firewall restrictions?
On some of my production systems that need to be accessible outside of the LAN I will sometimes add a firewall restriction at the edge to only permit traffic on, say, RDP from a specific origin IP ...
-2
votes
0answers
44 views
iptables/ ebtables to change out going mac address
I want to change my outgoing mac address using ebtables or iptables. I know that I can do it ny ebtables mac, as I found this in http://ebtables.sourceforge.net/examples/basic.html#ex_nat
but its not ...
0
votes
1answer
54 views
Different Mac address to virtual interface and primary interface
I am developing a system, where I need virtual interface to have different mac address for my primary and virtual interface
lets say my mac for eth0 is 00:11:00:11:00:11
and my virtual interface is ...
1
vote
1answer
74 views
When a client sends a RST packet, will the server close the connection ?
What I'm trying to do is block RST attacks with IPTables.
When I do a search for it, I'm seeing rules where packets with the RST flag set is being rate limited.
I'm questioning it a little bit. I ...
10
votes
4answers
814 views
Can the IP address for an HTTP request be spoofed?
On a website I am building, I plan to log the IP addresses of submissions, just in case it's necessary. I don't mind proxies, but outright spoofing your IP address would defeat the purpose.
To ...
1
vote
1answer
92 views
DDoS false IP attack [closed]
Possible Duplicate:
DDoS attack, how to stop?
I'm getting 10MB attacks, IP spoofing, which is used fake IPs, causing high CPU usage of the machine, and falls all. What should I do to ...
0
votes
1answer
69 views
iptables: is it possible to spoof NEW packets and make them look like ESTABLISHED packets?
See title for the question.
This question relates to a previous question wherein I asked the difference between NEW,ESTABLISHED and RELATED , see it here iptables: difference between NEW, ESTABLISHED ...
-2
votes
1answer
146 views
Can an attacker exploit the vulnerability of the firewall to access the www server?
What happens if an attacker has found a technique for sending packets through the firewall to the DMZ without the packets being checked?
Suppose the attacker doesn't know the internal addresses of ...
5
votes
1answer
461 views
How to prevent IP spoofing using MAC and ebtables?
I am trying to create IP-MAC pairing rules in ebtables. There are few tutorials and related questions [1] available but I have kind of specific setting.
ENVIRONMENT:
I have many physical hosts. Each ...
0
votes
1answer
56 views
Cisco 871 IOS BVI: Distinguishing incoming and outgoing
I understand that a BVI is very much equivalent to a network switch. But it includes the benefit of being able to have an access control list.
I am doing this, but I would like to more effectively ...
0
votes
1answer
58 views
Blocking External Mail Sent w/ Spoofed Email Address
We recently got an email from an outside server that had a spoofed "From:" header that was the email address of one of our users. Is there a way to have sendmail reject emails coming in from an ...
0
votes
0answers
38 views
Is OpenVPN's if-config-pool-persist option secure?
My question is: will OpenVPN (server) ensure that my assigned IP addresses (ipp.txt) are always obeyed? Or with other words is this option spoof-safe?
I tried to test it, but there is no easy way ...
-4
votes
4answers
71 views
Hiding Gaming Software's Main Server
I run a gaming website. Players download the client software, install it and run it on their desktops. The software isn't hosted on the main server but I have been told that once the software is ...
0
votes
2answers
127 views
Hyper-V MAC Spoofing security hole
I have a windows 2008 R2 SP1 standard dedicated server and i installed Hyper-V role on it.
I'm serving Hyper-V VPSs on this server and i can't trust virtual nodes. now the broblem is each node can ...
0
votes
1answer
137 views
Banner Grabbing Spoofing
I run a windows server 2008 standard R2. Is there a way to spoof the server banner ?
So instead of Microsoft-IIS/7.5 it could be anything.
1
vote
1answer
296 views
Linux-KVM / iptables: prevent guest spoofing by matching ip+mac address on bridge?
I have my KVM guests on a standard br0 bridge setup:
auto br0
iface br0 inet static
address 192.168.1.117
netmask 255.255.255.0
network 192.168.1.1
broadcast 192.168.1.225
gateway ...
0
votes
2answers
160 views
My exchange 2003 mail server is blocked by RBL lists. Someone is sending spam from inform@mydomain.com
All outgoing email to external recipients from my Exchange 2003 server is getting blocked by RBL lists.
I'm new to administrating Exchange and i checked the Message Tracking Center under System ...
0
votes
1answer
322 views
What's the best way to block IP spoofing on a layer 3 switch?
We're hosting Dedicated Servers and are currently using old 3com switches with IP-based ACLs. So each port has an ACL that allows all IP addresses assigned to this customer, and blocks everything ...
1
vote
1answer
528 views
Using arpwatch to backtrack proxy access ip to eap-tls certificate
In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. ...
1
vote
2answers
121 views
MAC spoofing - keeping the connection alive
Is it possible to keep a connection alive, while spoofing/changing the MAC address of your own network adapter (especially wlan adapter), without needing to re-authenticate against 802.1X ...
0
votes
2answers
224 views
Stop spoof emails in Google Apps
Desperately need some help here. I've been using Google Apps for my domain (2qubed.co.uk) for over 2 years now with no problems at all until recently.
For the past few months I have been getting lots ...
5
votes
3answers
1k views
How to prevent ip spoofing within iptables?
My Apache web-server on Linux is being flooded by massive requests for a non-existent file. The immediate impact is the rapid growth of the access & error log. I already took care of this by not ...
0
votes
3answers
85 views
How to scan for which ports would be open to another location
I'm just assessing the security of my home server in preparation for opening it up to the internet. I've used nmap from a machine on my local network but I have firewall rules allowing access from the ...
0
votes
1answer
265 views
How to avoid sendmail relay domains spoofing
I have a bunch of domains as relay domains at my sendmail config, i noticed that some dirty botnet is using dns spoof to be able to send emails using those relay domains.
How it works:
a domain ...
5
votes
4answers
267 views
MAC address spoofing - why doesn't this work?
So I'm in a new job, and they're pretty draconian about their network, hardware, and OS security. :-( I'm a web developer, but am forced to use IE7 for development simply because they don't want ...
1
vote
1answer
112 views
Preventing Email Spoofing
I use Google Apps with my domain.
Recently, we have begun to receive spam that gets past Google's spam filters. They are from our own email addresses.
I am wondering how to prevent this kind of ...
0
votes
1answer
947 views
ISA Server dropping packets as it believes they are spoofed
We have ISA Server 2004 running on Windows Server 2003 SP2.
It has 2 NICs - one internal called LAN on 192.168.16.2, with a subnet of 255.255.255.0, and one external called WAN on 93.x.x.2. The ...
0
votes
4answers
321 views
I need to somehow change my ip address
i`m in a lan using iptables/masquerade.
what i want to do, is to login in a web application.i write my user and passwd and click login and everything is fine, but if i try to modify something in that ...
0
votes
1answer
580 views
Redirecting requests from domain to local server
I'm developing a web application for a pre-production hardware device which has the domain from which it loads the app hard-coded. Is there a (simple) way for me to reroute these requests to a local ...
1
vote
3answers
724 views
How to avoid DNS spoofing for DNS lookup
I am trying to find a way to obtain the real ip addresse(s) for a domain name. I'm working on a router doing traffic shaping with the use of iptables and tc. I then need to setup iptables rules for ...
39
votes
15answers
4k views
Are IP addresses “trivial to forge”?
I was reading through some of the notes on Google's new public DNS service:
Performance Benefits
Security Benefits
I noticed under the security section this paragraph:
Until a standard ...
2
votes
2answers
178 views
Can IP spoofed traffic get above the transport layer?
I'd like to know whether you could get packets with a spoofed IP address above the transport layer. My thoughts are:
TCP: No, as acknowledgements would never get to the original sender if their IP ...
2
votes
2answers
1k views
Reject obviously spoofed messages in Exchange 2007 SP2
I have an Exchange 2007 SP2 server which happily accepts SMTP messages whose sender is SomeRandomString@mydomain.com and the recipient is SomeRealUser@mydomain.com; this leads to all sort of spoofing ...
