考虑以下问题：
您的 ISP 为您提供动态 IP 地址（例如 123.123.123.123）。
我的问题很简单（答案可能不是）：
是否可以将带有外部源 IP（例如 124.124.124.124）的单个 udp 数据包发送到固定 IP 服务器？我不需要从服务器得到答案。我只是想知道是否/如何使用伪造的源 IP 地址来完成这种单向通信。
服务器和其他任何人都不应该能够找到真实的客户端IP。
Think about the following:
Your ISP offers you a dynamic ip-address (for example 123.123.123.123).
My question is simple (the answer may not be):
Is it possible to send a single udp-packet with an outer source-ip (for example 124.124.124.124) to a fixed-ip server? I don't need to get an answer from the server. I just want to know if/how this one way communication can be done, using a faked source-ip address.
The server and no one else should not be able to find out the real client ip.
发布评论
评论（4）
UDP 数据包实际上没有源（您的）IP 地址。源 IP 地址是发送的数据包的一部分。因此，您必须修改它所包含的数据包。因此，虽然这很重要，但这是可能的。 UDP 的数据包结构，以及 附上数据包以供参考。
The UDP packet does not actually have the source (your) IP address. The source IP address is part of the packet it is sent in. So you would have to modify the packet it is enclosed in. So while it is non-trivial, it is possible. The packet structure for UDP, and the enclosing packets for reference.
这就是IP欺骗。除非您的 ISP 是狡猾的俄罗斯 ISP，否则它可能会阻止您这样做（第一个路由器只会丢弃数据包，因为它是可疑的）。
如果您不想被识别，您应该尝试找到支持 UDP 的代理...
或者您可以 购买僵尸网络。 :)
（如果你没有得到它，那是个笑话，不要这样做）
This is IP-spoofing. Unless you ISP is a dodgy russian one, it will probably prevent you from doing that (the first router will just drop the packet because it is suspicious).
If you don't want to be identified you should try to find a proxy supporting UDP...
Or you can buy a botnet. :)
(if you didn't get it, that's a joke, don't do that)
如果您的 ISP 使用出口过滤，并且他们不控制 124.124 的地址块。 124.124打开了，然后就不行了。
如果他们确实控制了它，并希望这是一个有效的 IP，可能会离开他们的网站。他们可能会将 IP 与 MAC 地址绑定并阻止此行为。也许不是。
您可以将电脑的 IP 更改为该地址，然后使用程序发送 udp 数据包。不存在“假IP”这样的东西。它们最终都确实存在。它们要么是合法分配的，要么不是合法分配的。
最后我不建议采取这一行动。
If you're ISP employs Egress filtering and they don't control the address block that 124.124.124.124 is on, then no.
If they do control it and expect that to be a valid IP leaving their site, possibly. They might tie IPs to MAC addresses and block this. Maybe not.
You could change the IP of your pc to that address and just use a program to send a udp packet. There's no such thing as a "fake IP". They all in the end do exist. They are either legitimately assigned or not.
Finally I would not suggest taking this action.
为此，您需要访问您的 ISP 路由器。如果您将包含所有信息的原始 UDP 数据包发送到其他服务器，路由器会将其封装在另一个包含您真实 IP 的数据包中。
You will need to have access your ISP Router in order to do that. If you send a raw UDP-Packet with all the information to the other server, the Router will encapsulate it in another Package with your real ip.