> I am not debating whether you can't fake IP headers, I don't know - what I > do wonder is, if you fake IP headers, and you specify an IP > that's not you, > then how are you going to receive data back? If you know what I mean?
True, but you don't need to get data back to the client to cause damage. Think of an online banking app - if I know the exact steps required to transfer money from one account to another - why do I need a response from the server at all? Cheers Mark ------------------ Mark Stanton Technical Director Gruden Pty Ltd Tel: 9956 6388 Mob: 0410 458 201 Fax: 9956 8433 http://www.gruden.com --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] MXDU2004 + Macromedia DevCon AsiaPac + Sydney, Australia http://www.mxdu.com/ + 24-25 February, 2004
