CoLinux and IP Spoofing?

[Gripp]

I REALLY am no hacker/guru....

so i figured i'd ask a couple

the other day i had an idea... if i understand correctly, hackers tend to use compromised systems to perform their dirty deeds while masking their IP; in which case authorities tend not to point the finger at the originating IP (the owner of the compromised computer) because they see signs that the computer may have been under the control of another IP (which may still not be the real IP..)

so.. the thought occurred to me that i can set my Colinux (under XP) to whatever IP i choose and the virtual hardware (WinPcap in this case) would create the appearance that this IP had been compromised by the Colinux IP... and the authority would then busy himself with trying to uncover the source of that IP... leaving you, the real IP, as just a "bi-stander"

would or wouldn't this work???

more importantly; if not, why not? (please, be as over-the-top technical as you want.. just gives me more to learn )

[NeddySeagoon]

Gripp,

No it won't work. For you to get a response to any TCP/IP packets you send onto the internet, they must have your public IP in them. Creating a "Russian doll" of systems inside you own IP will not provide the right logs for the authorities to inspect.

Crackers (not hackers please) operating the way you suggest, leave a trail of public IPs in the compromised machine(s) logs. Your logs would be very different.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.