HTTP IP spoofing detection

2012-03-14 Thread ik
Hello, I'm trying to detect a layer 7 based HTTP request, and see if it contain headers that provided as spoofed IP address. Is there a way to detect what is the Ethernet that the request arrived from at apace level ? If so, how can I provide rules what to do according to an HTTP header fields ?

Re: HTTP IP spoofing detection

2012-03-14 Thread shimi
On Wed, Mar 14, 2012 at 1:23 PM, ik ido...@gmail.com wrote: Hello, I'm trying to detect a layer 7 based HTTP request, and see if it contain headers that provided as spoofed IP address. Is there a way to detect what is the Ethernet that the request arrived from at apace level ? If so, how

Re: HTTP IP spoofing detection

2012-03-14 Thread ik
On Wed, Mar 14, 2012 at 13:30, shimi linux...@shimi.net wrote: On Wed, Mar 14, 2012 at 1:23 PM, ik ido...@gmail.com wrote: Hello, I'm trying to detect a layer 7 based HTTP request, and see if it contain headers that provided as spoofed IP address. Is there a way to detect what is the

Re: HTTP IP spoofing detection

2012-03-14 Thread shimi
On Wed, Mar 14, 2012 at 2:02 PM, ik ido...@gmail.com wrote: On Wed, Mar 14, 2012 at 13:30, shimi linux...@shimi.net wrote: On Wed, Mar 14, 2012 at 1:23 PM, ik ido...@gmail.com wrote: Hello, I'm trying to detect a layer 7 based HTTP request, and see if it contain headers that

Re: HTTP IP spoofing detection

2012-03-14 Thread Nadav Har'El
On Wed, Mar 14, 2012, ik wrote about HTTP IP spoofing detection: Hello, I'm trying to detect a layer 7 based HTTP request, and see if it contain headers that provided as spoofed IP address. Is there a way to detect what is the Ethernet that the request arrived from at apace level

Re: HTTP IP spoofing detection

2012-03-14 Thread ik
On Wed, Mar 14, 2012 at 16:28, Nadav Har'El n...@math.technion.ac.il wrote: On Wed, Mar 14, 2012, ik wrote about HTTP IP spoofing detection: Hello, I'm trying to detect a layer 7 based HTTP request, and see if it contain headers that provided as spoofed IP address. Is there a way to detect

Re: HTTP IP spoofing detection

2012-03-14 Thread ik
On Wed, Mar 14, 2012 at 14:23, shimi linux...@shimi.net wrote: On Wed, Mar 14, 2012 at 2:02 PM, ik ido...@gmail.com wrote: On Wed, Mar 14, 2012 at 13:30, shimi linux...@shimi.net wrote: On Wed, Mar 14, 2012 at 1:23 PM, ik ido...@gmail.com wrote: Hello, I'm trying to detect a layer