From owner-freebsd-questions@FreeBSD.ORG Sun Oct 17 23:37:19 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E4052106564A for ; Sun, 17 Oct 2010 23:37:19 +0000 (UTC) (envelope-from jamesbrandongooch@gmail.com) Received: from mail-wy0-f182.google.com (mail-wy0-f182.google.com [74.125.82.182]) by mx1.freebsd.org (Postfix) with ESMTP id 7A4F28FC1D for ; Sun, 17 Oct 2010 23:37:19 +0000 (UTC) Received: by wyb38 with SMTP id 38so445778wyb.13 for ; Sun, 17 Oct 2010 16:37:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=MePFe0SEAXnRCoqcYviEbg2hBj6NKpvlUkSUyyQFuF8=; b=KLAhpmKQH/PMPEpiGEuQcK5hY5lDr484ke4bPNh2y0cGQmFJeI4Tp3xXFA1ztrKoJQ SSlMM6FufdDISkaLKSqxThaAUJyK8dMJ6eRgypYvKIrOrZMenMmCm4CrAHWlP3uzSe6K QUTIKp46ZJvKC9ti0uJCQwCW7VZKhKchV8Was= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=cwM226Spdqgj5xxYQVN7rfgSvYrmMxoA26raDS+xOStgKok0Vx7po9TY3fQB64ob3S A5CrGWi7lCuxj0jwcVjVfY6buOeXGCqDtwWcXsRhBkke7MV3scMh6CTKUOJlo17CmkDz XTK8TBP0HOj350xxHMWhhjd4goBFBEou4VcAY= MIME-Version: 1.0 Received: by 10.216.140.37 with SMTP id d37mr4503339wej.31.1287358638233; Sun, 17 Oct 2010 16:37:18 -0700 (PDT) Received: by 10.216.131.207 with HTTP; Sun, 17 Oct 2010 16:37:18 -0700 (PDT) In-Reply-To: References: <201010171718.o9HHISJq003050@mail.r-bonomi.com> Date: Sun, 17 Oct 2010 18:37:18 -0500 Message-ID: From: Brandon Gooch To: Nerius Landys Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-questions@freebsd.org, Robert Bonomi Subject: Re: UDP packet spoofed LAN source address? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Oct 2010 23:37:20 -0000 On Sun, Oct 17, 2010 at 4:59 PM, Nerius Landys wrote: >> >> >> > Maybe, is there a simple 10 line C program that I can run and compile to >> > check if this scenario is possible on _my_ server? >> >> 'netcat' has the capability built in. >> >> > root# echo "hi" | nc -u -w 1 -p 30002 -s 64.156.193.115 daffy 30001 > nc: bind failed: Can't assign requested address > > I don't seem to be able to spoof a source address using netcat, unless I'm > missing something in the man page. I think you need to have the IP address you wish to spoof bound to an interface. -Brandon