[arachne] Re: Spam

Arachne at FreeLists---The Arachne Fan Club!

Udo,
 There is no need for return packets. The bogus
email address, and IPaddress are there to cover
their tracks. They want you to buy what they are
selling, or to click on the URLs within the email.
Rob

--
     -----Pine Email on Slackware GNU/Linux-----

On Mon, 1 Jan 2007, Udo Kuhnt wrote:


Arachne at FreeLists---The Arachne Fan Club!


You most certainly can spoof an IP address. Hackers
do it all the time by changing the source address in
the packet headers.


And what would be the effect? The remote system would then send its
packets to the wrong IP address, and the spammer would have gained
nothing. Until they also find a way to tell the Internet which servers
to use for routing the packets, so they could use IP translation on both
routes.

Well, I may not be familiar with hackers' tricks, but I know that using
duplicate IP addresses in a network causes routing errors.

Let's say a spammer in the USA would use a fake Asian IP address in the
packet header. What would happen if the remote system sends back a
packet? I am pretty sure that it would not even be routed towards the
US, but rather to the Asian Pacific region.

So I am not convinced that Internet routers could be fooled so easily
just by changing an address field in the packet header. I also doubt
that the average spammer possesses the technical knowledge to do this.

Regards,

Udo

-- The DR-DOS/OpenDOS Enhancement Project - http://www.drdosprojects.de

-- This mail was written by a user of The Arachne Browser - http://arachne.cz/
                 Arachne at FreeLists
-- Arachne, The Premier GPL Web Browser/Suite for DOS --
Arachne at FreeLists -- Arachne, The Premier GPL Web Browser/Suite for DOS --

Other related posts: