3 ms·
because nothing says you have to include your real ip in the src header of the ip packet if you don't care about the reply.
by MrStonedOne 5y ago
because nothing says you have to include your real ip in the src header of the ip packet if you don't care about the reply.
- sophacles 5y agorp_filter (reverse path) does. Problem is it's a leaf(ish) router solution: if the src ip is not in the locally attached subnet, drop it. Not every isp sets this up though, for whatever reason.
- MrStonedOne 5y agolimiting your spoofability to ips by the same isp doesn't help, especially since many will have multiple subnets so it won't help your target's ability to filter the packets out