5 ms·
There's still a lot of ISPs that don't follow BCP-38 so source address IP spoofing is easy enough
by elktea 13y ago
There's still a lot of ISPs that don't follow BCP-38 so source address IP spoofing is easy enough
- zokier 13y agoSSH is TCP based, you need two-way handshake to construct the connection. Source address spoofing gets you only half-way there.
- bostik 13y agoUnless your server's TCP stack has SYN-cookies enabled (and I think most do): http://www.jakoblell.com/blog/2013/08/13/quick-blind-tcp-connection-spoofing-with-syn-cookies/ http://www.jakoblell.com/blog/2013/08/13/quick-blind-tcp-con... Law of unintended consequences strikes again.