TIP: Click on subject to list as thread! ANSI
echo: nthelp
to: All
from: Geo
date: 2006-04-04 22:57:32
subject: spoofing clients

From: "Geo" 

Anyone here think they could write a program that could do the following.

I want to create a web page that allows folks to test to see if their ISP
is spoofable, iow if they filter outbound packets that have a source
address of something other than is hosted on their networks.

To do this I need some sort of a client side executable that can send a UDP
packet with a special fixed source address (something on my network would
work) and the real IP address of the source as the data in the packet to my
website. On the website side I would need something that can receive this
packet and determine the real source address from the data then pass that
off to an access database.

The idea is to present networks that don't prevent spoofing as having a
security issue "spoofability" and then to use the database to
monitor the progress of getting ISP's to implement BCP38 (egress
filtering).

I've decided if I don't want to see recursive dns servers get forced to
lock down like open relay servers were forced then I'm going to need to get
more involved and try to provide something like this but I'm not a coder.
Anyone here interested in taking a stab at writing spoofing clients?

Geo.

--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267 270 5030/786
@PATH: 379/45 1 106/2000 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.