Spoofing an IP address... ??

I have been curious as to the whole subject of IP spoofing. Over the years I have read a lot about it but I dont think I really grasp the whole thing.

So an IP spoofer would edit the header of an outgoing packet to show a different IP. If this is true then how does your computer get the return packets? Wouldnt it try and send it to the spoofed address?

I have seen programs that are suppsoed to spoof an IP but i havnt been able to get them to work. I have great interest in network security and this seems to open up a whole new avenue of attacks and prevention but I havnt been able to get much info on it.

Could somebody give me more info on this subject? Maybe explain how it works or link some rescources. I would also be interested in hearing about some programs that do this, so i can test it out on my network.

heh it's an old txt but phrack always has good papers

http://www.phrack-dont-give-a-****-a....php?p=48&a=14

See my tutorial in the tutorials section.
http://www.antionline.com/showthread...hreadid=238153

Quote:

---

Originally posted here by don
See my tutorial in the tutorials section.
http://www.antionline.com/showthread...hreadid=238153

---

Wow thanks for the tutorial. Thats really helpfull. I'll have to get my linux computer up and running again to test it out but just reading it has helped me undterstand the concept better.

Your welcome. I have added more detail to it and submitted it for the newsletter as well. You
may want to check it out when it comes out. Or just post your questions to this thread and I
will answer them for ya time permitting.