> How easy is it to spoof the source IP and port in UDP packets? Dead simple. Two lines of C.
> packets. Now my question is, do I need a similar "challenge number" system > for my new code Yes. > or is it enough to check NET_CompareBaseAdr() or NET_CompareAdr()? No. Google 'tcp sequence number' and implement something similar. Make sure your sequences are non-guessable. Possibly look at the sequence generator in your kernel for inspiration. _______________________________________________ ioquake3 mailing list ioquake3@lists.ioquake.org http://lists.ioquake.org/listinfo.cgi/ioquake3-ioquake.org By sending this message I agree to love ioquake3 and libsdl.
