Solved

Authenticate someone by ip, how safe is it?

Posted on 2004-03-25
2
180 Views
Last Modified: 2010-04-11
Hi I have a script on a web server that is accepting xml from certain ip's that I approve. How easy is it for somone to spoof one of my approved ip's and send me unauthorized data? Is there some way that I can check that they are really sending from that ip?
0
Comment
Question by:jimkat
2 Comments
 
LVL 6

Accepted Solution

by:
bloemkool1980 earned 500 total points
ID: 10685790
if it is only sending and the spoofed IP does not need a response it is pretty easy to do it.
I would rather put authentication before you allow them to send. And no you cannot verify if it is spoofed or not unless it is not going over the internet you could check the mac address.
So unless he needs to click on something as a confirmation before sending it is not safe at all. I would rather suggest putting in authentication in combination with the IP address.
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 10686063
as bloemkool1980 indicated, one can easily spoof an IP address BUT it's a one way street, they can send you packets but never get an answer. TCP/IP requires a three-way handshake to establish a connection, you can't just send a steam of packets as with UDP.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question