IP spoofing is not what you should worry about in this case. However I'll reply what you wrote.
Originally Posted by
_NightWare
[pca]--pca-->internet--pca-->server
[pca]<--s1---internet<--s1---server
[pca]--pca-->internet--pca-->server handshake complete.
This is not how the TCP three way handshake works. If you want to explain it, you will need to use more technical terms.
Originally Posted by
_NightWare
rip your bs claims
What I wrote:
Originally Posted by
javalover
And a 3 way handshake wouldn't prevent IP spoofing, it would make the connection just harder to spoof
is right. A TCP handshake makes just harder IP spoofing, and this is not even what was it designed for. Does it prevent IP spoofing? No. Let's do a practical example: how does a SYN spoofed DoS attack work. Using a SYN spoofed attack, the attacker, while spoofing another IP, is able to establish a connection with the server using a SYN request. The server replies with a SYN-ACK request, but it won't never receive a reply from the attacker. The connection remains opened, while the server may get overloaded.
I can bypass the validation of the IP by leaving the connection opened, so I can let the handshake segments/sequences not complete at all. Summarizing, this is still how the SYN spoofed attack bypasses the TCP three way handshake to spoof a different ip.
p.s: Thank you for the free insults.
