Topic: Internal IP are showed outside

[pelle1]

Hello,
I have tested my SME Server 6.5 with a lots of firewall test pages and some of them are catching my internal IP. Should not my SME Server masquerade this address?
Do I have to config sometihing to really hide the internal IP?

[arne]

You does not tell how you do the testing. It does not help much how well the firewall work if the lan web browsers sends out info about the local adresses.

[pelle1]

Hello again,
I have tested my firewall (SME 6.5) in a lot of tests and one that catched my internal IP are http://www.auditmypc.com/freescan/prescan.asp.

Can it be my browser, Firefox, that sends my internal address and can I stop that?

[CharlieBrady]

I have tested my firewall (SME 6.5) in a lot of tests and one that catched my internal IP are http://www.auditmypc.com/freescan/prescan.asp.

Can it be my browser, Firefox, that sends my internal address and can I stop that?

Remember that those tests are all run by someone who is trying to sell you something.

Knowledge of your internal IP addresses shouldn't allow anyone to attack your internal PCs - a firewall should be preventing that.

I think you'll find that squid is adding a X-Forwarded-For header. Your internal IP addresses will also appear in Received headers in mail messages which traverse your server.

[pelle1]

Thanks,
I have tested security at Sygate, Norton and other big ones and they have nothing to complain about so I feel a little bit more happy now.