Koozali.org: home of the SME Server

Stop internal IP going out

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« on: February 17, 2005, 01:41:18 PM »
Hi

I wish to be able to stoop my internal IP range 192.168.1.x, to show up to the extermal world.
Please remember that I am not a not a master Programer, just a hobby one. :roll:

Alberto
......

Offline raem

  • *
  • 3,972
  • +4/-0
Stop internal IP going out
« Reply #1 on: February 17, 2005, 02:44:50 PM »
Normally it doesn't "show up".
How did you configure your server, server only, private server & gateway, gateway ?
Do you have a router or a bridged modem connection ?
...

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« Reply #2 on: February 17, 2005, 02:58:54 PM »
Hi Ray
I am using the SME 6.5b2, but is the same with 6.01 the set up is Server & Gateway conected to a ADSl cisco modem, I am using the www.afraid.org dynamic services and when I whant to check my new external ip then it shows up my internal IP 192.168.1.95, and is not the only situation on some web pages they come out stating wich internal ip is going out.
Thanks on advance.
Alberto
......

Offline raem

  • *
  • 3,972
  • +4/-0
Stop internal IP going out
« Reply #3 on: February 17, 2005, 03:20:22 PM »
What are your settings from the Review Configuration panel in server manager ?
...

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Stop internal IP going out
« Reply #4 on: February 17, 2005, 03:22:20 PM »
Quote from: "lu2fgn"
I wish to be able to stoop my internal IP range 192.168.1.x, to show up to the extermal world.


It's not worth trying. You want your system to be secure whether an attacker knows your internal IP addresses or not. If your system is not secure, then that's where you should put your energy, rather than try to obscure information which should have no security value.

Offline eiceic

  • ****
  • 118
  • +0/-0
    • http://www.eicsoftware.com
VPN
« Reply #5 on: February 17, 2005, 04:08:50 PM »
Just turn on the VPN access, then you can connect to your one external IP and have access to the entire inside network.

Look for VPN Access Yes/No in the user setup and # of PPTP clients in the security to turn the feature on..  

Chris Buechler

Offline raem

  • *
  • 3,972
  • +4/-0
Stop internal IP going out
« Reply #6 on: February 17, 2005, 04:09:20 PM »
Charlie is right (I'm sure).
As I understand it, your internal IP will not resolve externally so it does not really matter if people know it.

From the www.afraid.org site, perhaps you want to enable this feature:

"URL cloaking supported so users never see the real URL of your site in the address bar. If you so choose."
...

Offline eiceic

  • ****
  • 118
  • +0/-0
    • http://www.eicsoftware.com
VPN
« Reply #7 on: February 17, 2005, 04:21:23 PM »
Whoops - I thought you said you wanted the internal IPs to show up -- They don't -- don't worry about it.

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« Reply #8 on: February 17, 2005, 06:04:22 PM »
Well well.... lets clearup ...
Ray I hope that this is what you ask.
What are your settings from the Review Configuration panel in server manager ?
Administrador del servidor   http://servidor/server-manager/

What I whant is that my internal IP dont show up to the outside world.

Thanks  :hammer:
Alberto.
......

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Stop internal IP going out
« Reply #9 on: February 17, 2005, 09:04:28 PM »
Quote from: "lu2fgn"

What I whant is that my internal IP dont show up to the outside world.


My question is "why do you want that"?

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« Reply #10 on: February 17, 2005, 10:52:02 PM »
Hi Charlie

Well the answer is simple, we do have a Internet provider that will disconnect you if there is more than one machine connected, even if you have the 1024 kbps service, I was looking trough, but my knowledge of Linux is very small, my maine activity is electronics tech, plus some programing on C and of course Basic.
Also a 35 years radio amateur, just finish recompiling the kernel 6,5 to activate the mkiss, 6pack, etc, then I have a radio access at 9,6kbps for tcp ip on UHF on the radio amateur band.

Thanks for your interest
Alberto
Brs.
......

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« Reply #11 on: February 17, 2005, 11:19:58 PM »
Sorry for my English :hammer:
For shure I can make it better with Spanish....

 **then I have a radio access at 9,6kbps **

must state, I give TCP IP access at 9,6Kbps

Bye
Alberto
......

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« Reply #12 on: March 01, 2005, 06:47:31 PM »
Hi CharlieBrady

You did ask, I did answer, still waiting for a replay ????

Br.

Alberto  :hammer:
......

Offline gelcube

  • ***
  • 55
  • +0/-0
    • http://www.ninetails.net
Stop internal IP going out
« Reply #13 on: March 02, 2005, 07:10:01 PM »
I think I see what you are talking about.  When you go to a website like grc.com, it's reading the browser headers, correct?  That's a squid issue I ran into last year.  Squid forwards your internal IPs for some reason.  

Just create a custom template file named something like:

/etc/e-smith/custom-templates/etc/squid/squid.conf/51-anonymize_headers

Inside that template, put the command:

anonymize_headers deny X-Forwarded-For

Then expand the template and restart squid:

/sbin/e-smith/expand-template /etc/squid/squid.conf
service squid restart

This removes the "X-Forwarded-For" browser header, and website should then pull your actual external IP address.

Offline lu2fgn

  • ***
  • 55
  • +0/-0
    • http://www.sateliteros.com.ar
Stop internal IP going out
« Reply #14 on: March 02, 2005, 09:54:16 PM »
Hi gelcube

Thanks :hammer:

You did ligth the candel, your comand did gib an error
squid Ignoring unknown header ´X-Forwarded_For´
squid Ignoring unknown header ´x-forwarded_for´

I did a search and found this: http://forums.contribs.org/index.php?topic=6479.msg23272#msg23272  

All the same diferent commad and it acepted fine
and the grate thing is that it works grate....

Thanks a lot an sorry with my mistakes.....
I wish to invite a asado and some wine if you pass by
I am in Rosario Argentina.

Best regards
Alberto
......