Member Avatar for ppotter3

Hello!
I am working on a networking project and I had some questions....

I am in the process of building a network specifically for security penetration, & exploit testing, and I looking for some of the best methods for maintaining IP anonymity.

I know of the good old fashion method of ARP/IP spoofing, but the problem with these methods is that there may be a risk of possibly poisoning the network.

So, if I plan on using a router/modem device that implements NAT or PAT, what would be the best bet on how to implement IP anonymity?

The device I would like to use for this network is a Wireless Capable Modem Router, and it is nothing to special but it should be suitable enough for my project.

I want to use some form of IP spoofing to test the structures of the network being implemented, and any input or suggestions on practical methods of implementing this would be wonderful.

Also, any methods or ideas on how to practically re-route IP's or make the assigned IP address in the network remain unseen/anonymous or even different?

For my network test to be implemented properly, I want to make sure that the location and other information regarding the IP address to be either spoofed or unattainable.

I would appreciate any suggestions, methods, or ideas regarding IP anonymity.


Thank you very much,

POTTER

  • 2 Contributors
  • 2 Replies
  • 559 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by ppotter3

Dani AI

Generated

— a few clarifying points and a practical approach that build on the thread. ARP “spoofing” is strictly a Layer‑2 (local LAN) technique and will likely poison switched networks; raw IP source forging on the open Internet is severely limited by TCP semantics (responses go to the forged address) and by ISP/router filtering. A consumer wireless modem/router doing NAT/PAT only hides internal addressing from the LAN — the ISP‑assigned public IP and upstream logs still tie activity to the physical connection.

Operational realities that change what’s feasible: many providers implement ingress/egress filtering (BCP38) and many hosts/routers use reverse‑path filtering (rp_filter), so forged outgoing packets are frequently dropped. MAC address changes only affect the local link; Wi‑Fi probe frames and AP BSSIDs can leak physical location. For realistic, non‑destructive testing, emulate spoofing inside a controlled topology instead of attempting broad public IP forgery.

A repeatable, safe workflow: build an isolated lab (virtual machines on an internal virtual switch or a physically separate VLAN), provision a controlled remote exit (a disposable host under tester control in the desired region), and route test traffic through an encrypted tunnel to that exit so the target sees the exit’s IP. Example: run a dynamic SOCKS forward from a test host to the exit host:

ssh -f -N -D 1080 tester@exit-host

Point test tools at the SOCKS proxy and capture PCAPs on both sides to validate behavior and to confirm that the exit host is the observed source.

Practical tips and cautions: use firmware/OS that exposes NAT/firewall controls (OpenWrt, pfSense) for visibility; monitor NAT port mapping/timeouts and watch for port exhaustion; don’t run ARP poisoning or source‑spoofing on networks without explicit written permission — it can crash equipment and create legal exposure. As noted, routing through an external exit is what changes the visible IP; prefer a controlled exit under your control for repeatability and auditability.

Recommended Answers

All 2 Replies

Member Avatar for rubberman

You need to set up a secure VPN to anonymize your IP address. There are commercial services for this, such as VyprVPN, and free services such as TOR. Using these services, the remote site sees the IP address assigned by the service, and unless they are logging the linkage between the address your connection has been assigned to your real IP address, the remote system should not be able to determine who you are. You can do a Google search for these services, and here is a link: http://ipinfo.info/html/anonymous-surfing_2.php

Edited by rubberman because: n/a
Member Avatar for ppotter3

Awesome, that sounds like something I should consider. I had wondered about VPNs but never thought too much about it, I will have to check it out.

Thank you very much.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.