为什么不能伪造 IP 地址? [英] Why is it not possible to fake an IP address?

问题描述

我知道可以使用代理更改 IP 地址，但我想知道为什么不能通过从一台计算机发送更改的数据来更改它?

I know it's possible to change an IP address using a proxy, but I'm interested in why is it not possible to change it by sending changed data from a single computer?

更新:

感谢您的快速回复，但不清楚如果使用无状态协议(如 HTTP)会发生什么.我对底层网络通信不熟悉，但从理论上讲，如果PC连接到服务器并立即收到回复，那么理论上应该可以伪造IP地址.

Thanks for quick replies, but it's not clear, what would happen, should a stateless protocol be used, like HTTP. I'm not familiar with lower-level network communication, but it seems that theoretically it should be possible to faken IP address if a PC connects to the server and receives the reply immediately.

推荐答案

使用伪造的发件人 IP 发送数据是完全可能的.但是，您将很难获得回复，因为回复将发送到假 IP 并且永远不会到达您.此外，如果您使用路由器不希望从您那里到达的来自"IP 发送数据，路由器通常会简单地丢弃它，并且有时会通知 ISP 您的行为违反了您的 TOS.

It is fully possible to send data with a fake sender IP. You'll have a hard time getting replies though, since the replies will be sent to the fake IP and never reach you. Additionally, if you send data with a "from" IP that a router doesn't expect to arrive from you, the router will often simply drop it, and sometimes inform the ISP that you're up to something that violates your TOS.

回应已编辑的帖子.

任何建立在面向连接的协议 (TCP) 之上的协议(例如 HTTP)都需要一个有效的 IP.虚假 IP 普遍存在的情况主要涉及拒绝服务攻击，使用 UDP、ICMP 或 TCP 握手中的初始 SYN 数据包.

Any protocol (such as HTTP) that is built on top of a connection-oriented protocol (TCP) will require a valid IP. The cases where fake IPs have been prevalent mostly involve Denial Of Service attacks, using UDP, ICMP or the initial SYN packet in a TCP handshake.

这篇关于为什么不能伪造 IP 地址?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！