Re: [fw-wiz] Private IP going outside of the firewall
From: Ravi Kumar (ravivsn_at_roc.co.in)
Date: 11/24/03
- Previous message: Wes Noonan: "RE: [fw-wiz] PIX 500 as ROUTER ONLY"
- In reply to: Maria Wing: "[fw-wiz] Private IP going outside of the firewall"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Maria Wing <mariawing@hotmail.com> Date: 24 Nov 2003 12:44:24 +0530
Hi,
The router with firewall can understand the interfaces IPs and will
look into routing table before routing the packet and checks spoofed
packets.
Just try out this;
ping -a 192.168.1.5
to know the host name. If its a windows machine it will give you the
hostname.
Another possibility could be spoofing of packets. If your firewall is
weak to detect spoofed packets then you better change Firewall :)
You can run tcpdump or ethereal to see the hardware address of the
192.168.1.5 machine.
What is the firewall box IP???
Hope this helps,
Best Regards,
Ravi Kumar CH.
iSecure- Firewall,VPN,L2Tp/IPSec,IIPS and more.,
Rendezvous On Chip (I) Pvt Ltd,
http://www.roc.co.in
Hyderbad
INDIA.
On Sat, 2003-11-22 at 02:25, Maria Wing wrote:
> I have this problem:
> We have this internal IP address (192.168.1.5) that somebody is using and I
> just need to know who/what machine.....It is suppose to be inside the
> company, my network configuration is really basic:
> line -> router/gateway -> firewall (NAT) -> switch/hub
> we use 192.168.1.x with 255.255.255.0
> If I disconnect the firewall from the router/gateway I lost contact with the
> 192.168.1.5 (it is not answering the pings)
> When I use traceRoute, shows me:
> from my machine (private IP) goes to -> router (public ip) -> ISP wan IP
> address (Public IP) -> 192.168.1.5 (Private IP)
>
> Why the answer is coming from outside?...
> We use static IP. We use NAT on the firewall. Also we use VPN and if I ping
> a computer using VPN I see something like this:
> my machine -> the vpn machine
> Thanks for any help
>
> _________________________________________________________________
> Need a shot of Hank Williams or Patsy Cline? The classic country stars are
> always singing on MSN Radio Plus. Try one month free!
> http://join.msn.com/?page=offers/premiumradio
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@honor.icsalabs.com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
- Previous message: Wes Noonan: "RE: [fw-wiz] PIX 500 as ROUTER ONLY"
- In reply to: Maria Wing: "[fw-wiz] Private IP going outside of the firewall"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
