>An how do they know from whence they came? Do I smell an IP spoofing
>attack?
in netscape, you open a URL .. http://www.foo.com/applet.html
and it downloads an applet.. the applet attempts to open a socket
to 'firewall.your.com' and it fails... because the socket class that
is available via netscape only permits it to connect to the host
designated in the above URL. if you can use IP spoofing to change the
URL listing in the "Location:" box of a browser.. i'd be fairly impressed.
after think about it a bit more than i really wanted to.. i dont see how
an applet can get around only being able to connect to www.foo.com.
jeff
Follow-Ups:
|
|
