Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

IP packets have a source field, which can be fake and not their actual IP. That's a Facebook IP, but the packet might not have actually come from it.


If they made actual requests that went through, a connection got established. That won't happen with a faked source.


Ah okay, thanks for helping me learn :)


Could be the IP address OP is showing is actually from an X-Forwarded header or other proxy header (but not the actual source of the packet).


UDP packets can fake their source IP. TCP packets realistically can't.


More precisely, spoofing a TCP handshake is a problem that we know how to prevent. Odds are pretty good that your kernel has these protections enabled by default, but it's not guaranteed and you should check as a matter of due diligence.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: