Re: Ip spoof from 0.0.0.0

From: Nexus <nexus(at)patrol.i-way.co.uk>
Date: Wed Nov 06 2002 - 18:53:10 EST

• Original Message ----- From: "Paul Gillingwater" <paul@lanifex.com> To: "Frank Cheong" <chocobofrank@hotmail.com> Cc: <incidents@securityfocus.com> Sent: Wednesday, November 06, 2002 7:08 PM Subject: Re: Ip spoof from 0.0.0.0

[snip]
> your router, not the remote attacker. The best you could do is ask your
[snip]

Good advice, also good luck ;-)
Try (tcp)tracerouting to RFC1918 addresses or IANA reserved netblocks through ISP's - quite scary how far you get sometimes before somebody with clue > 0 has been at the router configs and it gets dropped...

Cheers.

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Thu Nov 7 15:03:49 2002