Topic: Internal IP visible from web

[steve]

I have just upgraded to 5.1.2, clean install.  When I go to www.hdl.com/whoami the report is displaying my internal IP as my address and my external IP as the address of the proxy server.  Is this normal??  My understanding was that the server was supposed to block the internal IP from being visable.  When I was running 4.1, this report only showed the external IP.  Is this a security risk, or am I just being paranoid??

This is what the report shows....

Your IP Address 192.168.xx.xxx
 CGI.Client Remote Addr 68.xx.xx.xx
 CGI.Client Remote Host  
 Your Host Name  
 Proxy IP Address 68.xx.xx.xx

[steve]

I got the same thing from behind my 5.1.2 server.
However, at work, behind my checkpoint firewall, all it had was my external ip of my firewall.

What gives Mitel???  :^)

[Rich Lafferty]

I'd go with the "paranoid" part. Your internal-network addresses aren't
reachable from the Internet in the first place. It's the electronic equivalent
of saying that not only are you at 21 Sussex Drive, you're in "Jean's room";
unless you're already inside, "Jean's room" isn't particularly useful
information.

With 4.1, you probably weren't using the proxy at all; 5.1.2 adds transparent
Web proxying, but earlier versions required explicit browser configuration
to use the proxy. The proxy has always provided that information (or, at least,
it did so in 4.1.2, the oldest version I have running right now).

Cheers,

--Rich

[steve]

Thanks for the info Rich!
Now, is there a way to make it not give out this info??
The less someone on the outside knows about your system inside, the better!

-steve

[steve]

Thanks for the reply Rich.  I'll stop worring about this.  

Steve