LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 09-08-2008, 06:03 PM   #1
StarGhost
LQ Newbie
 
Registered: Sep 2006
Posts: 8

Rep: Reputation: 0
Cannot send out packets with spoofed source address


Hello everyone,

I've just written a C program to send an UDP packet out to some other computers with the source IP of my choice (not necessarily the IP of my NIC).

I think the program works fine as I tried tcpdump from local host and see all the created packets in the NIC. However, they do not appear on the machine where the packets should be sent, as I used tcpdump there and did not capture anything.

The fact was that, if I use the source IP of the same subnet with my NIC, then the packets would appear in the remote machine, otherwise they disappear. So I suppose my local machine must be preventing packets to be sent out with spoofed source IP somehow. Tried to turn off iptables, SELinux as well as to change various options from /proc/sys/net/ipv4 but didn't get any further info, no log, no error messages, etc.

Can any one give a hint. I'm using Fedora 2.6.22.9-91.fc7.

Thanks a lot for reading.

SG.
 
Old 09-09-2008, 06:48 PM   #2
gilead
Senior Member
 
Registered: Dec 2005
Location: Brisbane, Australia
Distribution: Slackware64 14.0
Posts: 4,123

Rep: Reputation: 151Reputation: 151
Have you tried checking other tools that do similar things (nmap and hping for example) and sniffing the packets with wireshark to see what's happening. I'm assuming you own this network (or at least have permission to do this).
 
Old 09-14-2008, 11:44 AM   #3
StarGhost
LQ Newbie
 
Registered: Sep 2006
Posts: 8

Original Poster
Rep: Reputation: 0
Excellent hint Steve, finally I discovered that it was the intermediate router that dropped all the packets with spoofed source IP.

Thanks a lot for that. This problem has been irritating me for quite a few days.

Regards,

SG.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
spoofed mac address and conflicts zzyborg Linux - Networking 8 12-09-2006 09:44 AM
Spoofed MAC address = no internet BDiddy Linux - Networking 7 09-23-2005 08:03 PM
Tracing Spoofed IP Address socceroos Linux - Security 9 08-08-2005 01:45 PM
Idea on spoofed packets? SiLiCoN Linux - Security 1 05-02-2005 06:30 AM
How to find source IP Address of a machine with net send /smbclient or netsender? murugesan Linux - Software 0 06-14-2004 06:08 AM


All times are GMT -5. The time now is 08:08 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration