But how can he use it as spoof. Does he need to own that server (ns server)?