spoof

How to configure single IP Addresses in IPtables

Opening up a whole interface to incoming packets may not be restrictive enough and you may want more control as to what to allow and what to reject. Lets suppose we have a small network of computers that use the 192.168.0.x private subnet. We can open up our firewall to incoming packets from a single [...]

How to Configure your DNS to protect against DoS attacks and Cache Poisoning

Somewhat similarly to Open Mail Relays, Open DNSs are not a good thing in this modern world. What used to be a friendly and neighbourly action, an Open DNS, may now be – inadvertently – placing yourself and others at risk for three major reasons

How to use Nmap for Port Scanning in Linux

How to know which port is open from unmanaged remote host? How to determine running application and services from remote host? How to do basic port scanning against a host? How to confirm ports opened from remote host? Here are a several ways to do port scanning and know which port/services are currently opened from [...]

Can the PIX/ASA Firewall block IP spoof attacks?

Yes. To enable the antispoofing feature on the PIX Firewall, issue the ip verify reverse-path interface int_name command. Note: This feature requires that all internal networks have routes to them on the PIX, and that a default route is also set. An example is shown below. ip verify reverse-path interface outside