Bekijk de volledige versie : protect internal ip address from scan (www.auditmypc.com)
when doing a scan at http://www.auditmypc.com/freescan/scanoptions.asp they seem to know my internal ip address.
What do I have to set the router to to prevent this ?
kraai
Tamadite
13-12-2004, 19:27
It has been already suggested in http://wl500g.info/showthread.php?t=1182&highlight=nat
This has nothing today with NAT or your router.
Apparently the website uses javascript to obtain and execute a java application (auditmypc.class) from the server, which uses http to send the ip-address (e.g. GET /audit.asp?a=10.x.x.x). The actual javascript function is encoded in Unicode characters and I was too lazy to de-obfuscate it...
document.write('\u003c\u0061\u0070\u0070\u006c\u00 65\u0074\u0020\u0077\u0069\u0064\u0074\u0068\u003d \u0022\u0031\u0022\u0020\u0068\u0065\u0069\u0067\u 0068\u0074\u003d\u0022\u0031\u0022\u0020\u0063\u00 6f\u0064\u0065\u003d\u0022\u0061\u0075\u0064\u0069 \u0074\u006d\u0079\u0070\u0063\u002e\u0063\u006c\u 0061\u0073\u0073\u0022\u003e\u000d\u000a\u003c\u00 2f\u0061\u0070\u0070\u006c\u0065\u0074\u003e')
If you want to see this for yourself delete all cookies which were set by auditmypc.com, refresh the page and use something like tcpdump to see what is really sent across the wire. If you deny all cookies from this site (delete those, which have already been set) and disable javascript and/or java, you'll won't see your internal ip-address on the website.
Tamadite
15-12-2004, 15:22
It is quite ventured to affirm that it has nothing to do with NAT or router.
I would say that there are many ways to get an internal IP address. I wouldn't deny it.
But actually, when I accept all cookies, enable javascript and/or java, use Internet Explorer with the lowest security level, auditmypc can not get yet my internal IP when using a sitecom router.
I would say that there are many ways to get an internal IP address.
Go ahead and post your view of this issue. I won't deny anything you can prove ;)
By the way, someone has posted the source of the java application.
http://m0n0.ch/wall/list/?action=show_msg&actionargs%5B%5D=111&actionargs%5B%5D=34 (m0n0 is a FreeBSD based embedded (NAT) router and firewall)