On Friday 05 Sep 2003 4:49 am, rikona wrote: > Hello Bryan, > > Thursday, September 4, 2003, 2:47:49 PM, you wrote: > > BP> It is trivial to spoof the machine name when sending out mail but > BP> spoofing the IP address is NOT trivial. > > If the virus sets up a stack that is *completely* independent, could > it use a different, spoofed IP address? Say, for example, one that was > in the headers of the infected machine email files - real, verifiable, > but not the address from which it was actually sent. [66.32.127.184] >
Yes it could send IP packets with a false IP address in them, but then the IP acknowlege packets being returned will go to the wrong place and any Level 3 protocol such as SMTP will fail derek -- ---------------------------------- www.jennings.homelinux.net http://twiki.mdklinuxfaq.org
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
