This is a two part question if you guys don't mind. The first question is: Can I spoof an IP and mac address without Hijacking?

The Second question is: How do I protect my users from hijacking?