Subject: [http-auth] sender IP address modification

From: Sarah Cai <[email-masked]>
Date: Wed, 16 Mar 2016 03:57:32 +0000 (UTC)

When an http request is sent from client to webserver, is there any way the sending IP address can be modified to a fake IP address?

---

From: Derek Atkins <[email-masked]>
Date: Thu, 17 Mar 2016 10:18:55 -0400

Sarah Cai <[email-masked]> writes:

>   When an http request is sent from client to webserver, is there any way the
> sending IP address can be modified to a fake IP address?

Yes, there are numerous ways to spoof an IP address, even with TCP.
Some attacks require guessing TCP sequence numbers.  Other attacks just
require routability.

-derek
-- 
       Derek Atkins                 617-623-3745
       [email-masked]             www.ihtfp.com
       Computer and Internet Security Consultant