226 ◾ Network Attacks and Defenses: A Hands-on Approach
connecting to the infected internal host. Remote-controlled pro-
gram-based viruses are a very serious threat because they allow
malicious users to fully control remote victim hosts.
The packets exchanged between the Web clients and serv-
ers will look like this:
Client-to-server packets:
Source IP = 192.168.1.1/24, Destination IP = 192.168.2.1/24,
Source port = Y, Destination port = 80,
where 192.168.1.1/24 is the possible IP addresses of the Web
clients, 192.168.2.1/24 is the possible IP addresses of the
Web servers, and Y is an arbitrary port number selected
by the Web client.
On the other hand, return traffic from the Web servers to the
Web clients (server-to-client) swaps IP addresses ...