5

Is it possible to spoof the source IP if I'm behind a router that is using NAT?

If not, how do botnet programmers manage to make a SYN flood from their slaves? Don't most home/business networks use NAT?

Kurt McKee
  • 1,410
  • 13
  • 17
shuwo
  • 103
  • 4

1 Answers1

2

In short, No unless you have a leak in the protocol.

A botnet can still "do a SYN flood" but, in case where a NAT function delineates the corporate LAN from the Internet, it is the router that will get flooded.

Of course, the actual situation is more complicated than that but I won't get into fully describing it here.

jldupont
  • 93,734
  • 56
  • 203
  • 318