Penetration Testing mailing list archives

DoS/DDoS Attack


From: Faisal Khan <faisal () netxs com pk>
Date: Fri, 14 Jan 2005 11:06:25 +0500



Folks,

Two quick questions.

When IP (Source) addresses are spoofed, is there no way of determining (a) that the IP Source Addresses is spoofed and not the genuine one (b) to be able to determine the actual IP address that is sending DoS packets?

Somehow I get the feeling I'm SOL when trying to find out the "genuine/actual" source IP address.

If this is the case, then pretty much we all are helpless with DoS/DDoS attacks - considering one can write a script/program to keep incrementing or randomly assigning spoofed source addresses in the DoS packets being sent out.

Faisal





Faisal Khan,  CEO
Net Access Communication
Systems (Private) Limited
________________________________

Network Security - Secure Web Hosting
Managed Internet Services - Secure Email
Dedicated Servers - Reseller Hosting

Visit www.netxs.com.pk for more information.



Current thread: