[knitrogen]

Greetings

me and my partner share a windows XP computer whenever i log in i get hit with ipspoof attacks that cause me to lose internet connection. they are getting more and more frequent. i am using bullguard gamers edition which includes my firewall

please help

[Phantom010]

Defending Against Spoofing

There are a few precautions that can be taken to limit IP spoofing risks on your network, such as:

Filtering at the Router - Implementing ingress and egress filtering on your border routers is a great place to start your spoofing defense. You will need to implement an ACL (access control list) that blocks private IP addresses on your downstream interface. Additionally, this interface should not accept addresses with your internal range as the source, as this is a common spoofing technique used to circumvent firewalls. On the upstream interface, you should restrict source addresses outside of your valid range, which will prevent someone on your network from sending spoofed traffic to the Internet.

Encryption and Authentication - Implementing encryption and authentication will also reduce spoofing threats. Both of these features are included in Ipv6, which will eliminate current spoofing threats. Additionally, you should eliminate all host-based authentication measures, which are sometimes common for machines on the same subnet. Ensure that the proper authentication measures are in place and carried out over a secure (encrypted) channel.

Conclusion

IP Spoofing is a problem without an easy solution, since it’s inherent to the design of the TCP/IP suite. Understanding how and why spoofing attacks are used, combined with a few simple prevention methods, can help protect your network from these malicious cloaking and cracking techniques.

[Cookiegal]

Phantom010,

When quoting from other sources, you need to post a link to it to give credit where due and not make it look like you actually wrote the article yourself.

[Phantom010]

Sorry, I forgot the link to the article:

http://www.securityfocus.com/infocus/1674

[Cookiegal]

Thanks.

[perfume]

Dear knitrogen,
I get network intrusion attacks everyday! My KIS2009 considers those IP addresses as spoofed, but all the same, blocks them and informs me! Most of those attacks originate from China. Most of our IP addresses are "static", and to make them "Dynamic" i found masking my Ip using the TOR bundle was excellent and free to boot. While i was using TOR, there were no intrusion attacks! To identify from where they are originating, kindly view this snap :