Re: source ip spoofing option problem

From: Danny McPherson <danny@tcb.net>
Date: 06/29/07
Message-Id: <D2F2C9A6-5724-4DFD-8066-144300C826B4@tcb.net>

On Jun 29, 2007, at 9:49 AM, Neil McKee wrote:

> Eric,
>
> I may be wrong, but I don't think Windows allows this kind of
> source-spoofing, even with cygwin. This feature was only ever
> tested on linux.

Yep, suspect so:

http://technet.microsoft.com/en-us/library/bd3abaad-c6cb-2b4e-
bc02-75876253e295.aspx#EHAA

What new functionality is added to this feature in Windows XP Service
Pack 2?

[...]
UDP datagrams with invalid source addresses cannot be sent over raw
sockets. The IP source address for any outgoing UDP datagram must
exist on a network interface or the datagram is dropped.

-danny
Received on Fri Jun 29 12:25:23 2007

This archive was generated by hypermail 2.1.8 : 06/29/07 PDT