更改网络中传出 IP 数据包的 IP 地址的影响
如果我将所有从我的网络传出的 ip 数据包的源 ip 地址修改为属于其他人的 ip 地址（同时确保校验和正确），那么会发生什么。
假设我有一个通过点对点链路连接到 ISP 的公共 IP 地址。 ISP 会检查我的 IP 数据包中的 IP 地址是否正确，或者只是转发数据包。 我认为 ISP 应该只转发数据包。
互联网中有哪些机制可以防止这种情况发生？
If I modify the source ip address of all outgoing ip packets from my network to an ip address belonging to someone else (while ensuring that the checksum is correct) then what will happen.
Assume that I have a public IP address connected by a point-to-point link to an ISP.
Will the ISP check that the IP address in my IP packets is correct or will it just forward the packets.
I believe that ISP should just forward the packets.
what mechanisms are present in the Internet that prevent this from happening?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
如果这样做，您可能无法建立 TCP 连接——回复将发送到欺骗性的 IP 地址，从而阻止三向握手成功。
您的 ISP 可能会也可能不会在其边界路由器上采用出口过滤并丢弃欺骗性数据包。
If you do this, you will probably be unable to establish a TCP connection -- the replies will go to the spoofed IP address, preventing the three-way handshake from succeeding.
Your ISP may, or may not, employ egress filtering at their border routers and drop the spoofed packets.
为什么您的 ISP 应该忽略您使用虚假信息欺骗包裹的尝试？
如果我是那个 ISP，我不仅会阻止这些软件包，还会立即将您踢出我的网络，因为您要么受到某些木马或其他恶意软件的攻击，要么故意做坏事。
我会这样做，作为对整个世界的公共服务（试图阻止计算机犯罪分子），并防止可能针对我的法律措施（在大多数地方，故意帮助犯罪活动仍然是犯罪行为，这是理所当然的）。
why should your ISP just ignore your attempts to spoof packages with false information?
Were I that ISP I'd not just block the packages but instantly kick you off my network as you're either compromised by some trojan or other malware or are deliberately doing something bad.
I'd do that as a public service to the world at large (trying to block computer criminals) as well as to prevent possible legal steps against me (knowingly helping in criminal activity is still a crime in most places and rightly so).