Enumerating housts behind NAT

From: Barry Irwin (bvi_at_itouchlabs.com)
Date: 04/30/03

  • Next message: anj: "re: Scanning for Trojans" 
    To: <pen-test@securityfocus.com>
Date: Wed, 30 Apr 2003 09:27:09 +0200

    Morning all

    Thought he following paper by Steve Belovin might be of some interest:

    http://www.research.att.com/~smb/papers/fnat.pdf

    Describes a technique for counting hosts behind a nat box.

    Barry 

    --
Barry Irwin         bvi@itouchlabs.com                    Tel:
+27214875178
Systems Administrator: Networks And Security
iTouch Technology
iTouch TAS      http://www.itouchlabs.com         Mobile: +27824457210
---------------------------------------------------------------------------
Did you know that you have VNC running on your network?
Your hacker does.
Plug your security holes.
Download a free 15-day trial of VAM:
http://www.securityfocus.com/StillSecure-pen-test
----------------------------------------------------------------------------
  • Next message: anj: "re: Scanning for Trojans"

    Relevant Pages

    • Re: Linksys WRT54G and Firewall software
      ... but, if you take your laptop to other networks it ... The NAT does block incoming connections. ... The XP SP2 firewall does block all incoming connections when configured with no exceptions. ... That does not explain why the computer would need another firewall from the XP SP2 FW when it is connected to other networks. ...
      (comp.security.firewalls)
    • Re: newbie to home network dhcp worries
      ... >> networks you are fine. ... you MUST run NAT on at least the Modem(the ... your setup is not much ... >> and IP from the ADSL unit, and the computers get an IP from the BEFSR. ...
      (microsoft.public.win2000.networking)
    • Thoughts on IPv6, was: Re: Help Broadcasting a UDP packet on the LAN:URGENT
      ... It might be useful to consider another perspective on IPv6: ... > to believe that adding crypto into your network layer is pointless. ... >> That would solve a lot of issues for secure networks. ... > NAT is an appalling hack. ...
      (freebsd-net)
    • Re: FTP configuration with RRAS
      ... It depends how you setup the RRAS. ... If you enabled the NAT, I would check the NAT services and ports. ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... networks can see each other from clients of ...
      (microsoft.public.windows.server.networking)
    • 30 year mind meld between prof. Hall and his E. coli
      ... A three decade long 'mind meld' between Barry G. Hall ... the phenomenon is the result of biochemical networks ... test tube and tell the gene it should bias its random mutations to deal ...
      (talk.origins)