OT: More Spam

[Bob Bell]

On Wed, Jan 22, 2003 at 09:05:19AM -0500, bscott at ntisys.com <bscott at ntisys.com> wrote:
>   You can't really spoof the source IP address of a TCP connection.  (Well,
> you can, but the TCP handshake will never complete, making it rather
> useless.)

    Sure you can, if you can guess the initial sequence number for the
TCP connection.  That's why there's that one site with all those plots
illustrating how predictable the sequence number is (somebody else
probably has the URL more readily available than I).

-- 
Bob Bell <bobbell at zk3.dec.com>
-------------------------------------------------------------------------
 "We have to make a management decision."
   -- Jerry Mason, Morton Thiokol Inc., before launching the "Challenger"