Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: lu2fgn on February 17, 2005, 01:41:18 PM

Title: Stop internal IP going out
Post by: lu2fgn on February 17, 2005, 01:41:18 PM: Hi

I wish to be able to stoop my internal IP range 192.168.1.x, to show up to the extermal world.
Please remember that I am not a not a master Programer, just a hobby one. :roll:

Alberto
Title: Stop internal IP going out
Post by: raem on February 17, 2005, 02:44:50 PM: Normally it doesn't "show up".
How did you configure your server, server only, private server & gateway, gateway ?
Do you have a router or a bridged modem connection ?
Title: Stop internal IP going out
Post by: lu2fgn on February 17, 2005, 02:58:54 PM: Hi Ray
I am using the SME 6.5b2, but is the same with 6.01 the set up is Server & Gateway conected to a ADSl cisco modem, I am using the www.afraid.org dynamic services and when I whant to check my new external ip then it shows up my internal IP 192.168.1.95, and is not the only situation on some web pages they come out stating wich internal ip is going out.
Thanks on advance.
Alberto
Title: Stop internal IP going out
Post by: raem on February 17, 2005, 03:20:22 PM: What are your settings from the Review Configuration panel in server manager ?
Title: Re: Stop internal IP going out
Post by: CharlieBrady on February 17, 2005, 03:22:20 PM: Quote from: "lu2fgn"
I wish to be able to stoop my internal IP range 192.168.1.x, to show up to the extermal world.

It's not worth trying. You want your system to be secure whether an attacker knows your internal IP addresses or not. If your system is not secure, then that's where you should put your energy, rather than try to obscure information which should have no security value.
Title: VPN
Post by: eiceic on February 17, 2005, 04:08:50 PM: Just turn on the VPN access, then you can connect to your one external IP and have access to the entire inside network.

Look for VPN Access Yes/No in the user setup and # of PPTP clients in the security to turn the feature on..

Chris Buechler
Title: Stop internal IP going out
Post by: raem on February 17, 2005, 04:09:20 PM: Charlie is right (I'm sure).
As I understand it, your internal IP will not resolve externally so it does not really matter if people know it.

From the www.afraid.org site, perhaps you want to enable this feature:

"URL cloaking supported so users never see the real URL of your site in the address bar. If you so choose."
Title: VPN
Post by: eiceic on February 17, 2005, 04:21:23 PM: Whoops - I thought you said you wanted the internal IPs to show up -- They don't -- don't worry about it.
Title: Stop internal IP going out
Post by: lu2fgn on February 17, 2005, 06:04:22 PM: Well well.... lets clearup ...
Ray I hope that this is what you ask.
What are your settings from the Review Configuration panel in server manager ?
Administrador del servidor http://servidor/server-manager/

What I whant is that my internal IP dont show up to the outside world.

Thanks :hammer:
Alberto.
Title: Stop internal IP going out
Post by: CharlieBrady on February 17, 2005, 09:04:28 PM: Quote from: "lu2fgn"

What I whant is that my internal IP dont show up to the outside world.

My question is "why do you want that"?
Title: Stop internal IP going out
Post by: lu2fgn on February 17, 2005, 10:52:02 PM: Hi Charlie

Well the answer is simple, we do have a Internet provider that will disconnect you if there is more than one machine connected, even if you have the 1024 kbps service, I was looking trough, but my knowledge of Linux is very small, my maine activity is electronics tech, plus some programing on C and of course Basic.
Also a 35 years radio amateur, just finish recompiling the kernel 6,5 to activate the mkiss, 6pack, etc, then I have a radio access at 9,6kbps for tcp ip on UHF on the radio amateur band.

Thanks for your interest
Alberto
Brs.
Title: Stop internal IP going out
Post by: lu2fgn on February 17, 2005, 11:19:58 PM: Sorry for my English :hammer:
For shure I can make it better with Spanish....

**then I have a radio access at 9,6kbps **

must state, I give TCP IP access at 9,6Kbps

Bye
Alberto
Title: Stop internal IP going out
Post by: lu2fgn on March 01, 2005, 06:47:31 PM: Hi CharlieBrady

You did ask, I did answer, still waiting for a replay ????

Br.

Alberto :hammer:
Title: Stop internal IP going out
Post by: gelcube on March 02, 2005, 07:10:01 PM: I think I see what you are talking about. When you go to a website like grc.com, it's reading the browser headers, correct? That's a squid issue I ran into last year. Squid forwards your internal IPs for some reason.

Just create a custom template file named something like:

/etc/e-smith/custom-templates/etc/squid/squid.conf/51-anonymize_headers

Inside that template, put the command:

anonymize_headers deny X-Forwarded-For

Then expand the template and restart squid:

/sbin/e-smith/expand-template /etc/squid/squid.conf
service squid restart

This removes the "X-Forwarded-For" browser header, and website should then pull your actual external IP address.
Title: Stop internal IP going out
Post by: lu2fgn on March 02, 2005, 09:54:16 PM: Hi gelcube

Thanks :hammer:

You did ligth the candel, your comand did gib an error
squid Ignoring unknown header ´X-Forwarded_For´
squid Ignoring unknown header ´x-forwarded_for´

I did a search and found this: http://forums.contribs.org/index.php?topic=6479.msg23272#msg23272

All the same diferent commad and it acepted fine
and the grate thing is that it works grate....

Thanks a lot an sorry with my mistakes.....
I wish to invite a asado and some wine if you pass by
I am in Rosario Argentina.

Best regards
Alberto
Title: Stop internal IP going out
Post by: gelcube on March 03, 2005, 12:08:42 AM: Hmm, that's strange. Maybe 6.5 has a little different setup. Or maybe it's because my 6.1-01 is an upgrade.

Anyway, I'm glad you found the solution.