What Is IP Spoofing? - Update - help?!?

[18rabbit]

I got a “Security Alert” msgs from my router:<br /><br />Ip Spoofing – Source:xxx.xxx.52.253,0, LAN – Destination:12.32.89.71,0, WAN<br /><br />The numbers for the xxx.xxx are actually included in the alert. It is the first two fields of the ip address I got from my internet service provider. Don’t have a clue where the 52.253 is coming from. It’s not my LAN. I’m using the router’s default ip of 192.168.0.x for the LAN, x=1 for the router, x=2, 3, 4, or 5 for the comps attached.<br /><br />The destination ip doesn’t exist, per Internic’s ‘who is’ utility.<br /><br />What is IP spoofing? Do I need to be concerned about this security alert?

 

[Scaaty]

Re: What Is IP Spoofing? - Update - help?!?

All scam crap........ALL OF IT. Delete

 

[Paul Moir]

Re: What Is IP Spoofing? - Update - help?!?

IP Spoofing is a get-your-foot-in-the-door type of attack. I'll try an explanation by analogy.<br /><br />Say you're having a conversation with a trusted friend over the telephone. You know it's you're friend because his number came up on the caller ID, you exchanged pleasantries, and breifly talked about your last fishing expedition. <br />Now, the attacker cuts in pretending to be your friend & tells you to do bad stuff. You do it because you think you're talking to your trusted friend. The number on the caller ID box never changed. (Darn, the analogy is starting to break down...)<br /><br />It's really easy for the attacker to pretend he's transmitting from the same phone number as your friend. But that's the only thing that's easy. The attacker can't really hear what you're talking about so he has to guess what the topic of conversation is so he can cut in seamlessly. Usually he has to silence your friend too. Also (here's where the analogy really suffers) when the attacker cuts in to the conversation he can only talk to you. He cannot listen because you respond to your friend.<br /><br />The biggest problem is you're not likely to do what ever your friend asks you to do. In the computer world, participants in 'conversations' involving this sort of trust are constantly verifying each other's identities rather than relying on the caller ID box mid-conversation.<br /><br />Should you worry about this attack? No. The router ate it, and it was probably a random attempt. Not one likely to succeed either.

 

[18rabbit]

Re: What Is IP Spoofing? - Update - help?!?

Thanks,Paul. I will disregard the alert msg ... and I'll call the phone company on Monday to disconnect my telephone.<br /> <br /><br />Scaaty, thanks for your reply, too.

 

[18rabbit]

Re: What Is IP Spoofing? - Update - help?!?

The spoofing continues. What, if anything, should I do?!?<br /><br />About every 2 weeks I get a security alert from my router that tells me the spoofing destination IP address for repeated spoofing attemps. Looked it up, it is the company woman works for. I know they employ all kinds of security, heavy monitoring of how her computer is used, keystroke recording, and auto updating/accessing of her computer and software at wee hours of the morning. Why would they be “spoofing” my router?!?