Discussion Locked

Internal IP address visible

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey there. I have a server running NT 4 with three nic cards. One is just a 3com, and the other two are the intel team adapters configured with the same IP address.
After capturing the packets sent from a client using our software to the server, we found that we are sending both our internal and external IP addresses to the client. How can I hide this internal IP address without messing up it's connection to our internal network?

6 replies

by isys

Are you internal addresses in the private range as defined in RFC 1918? If so, they are not leaving your premises. If not, you set your router to filter that address space.

by cricket_moon

the internal address is a private range. 192.168.1 is the network address. But, the IP address is beinging included in the packets being sent to the client.
We do use MTS. But, there is nothing in our program that specifies any IP address.

by isys

What type of firewall do you use? You should be able to configure it to alter outgoing packets to substitute your gateway IP for your internal Ip in the header. I use a Sonicwall Pro VX and it does that automatically in NAT. The only other way I know of is to use something to alter each individual packet's header (spoof) with whatever IP address you choose. You would have to look around the hacker sites for something that would suit your infrastructure.

by cricket_moon

But this is a private IP address. It shouldn't be sent in these packets in the first place. Should it? This information is actually inside the data of the packet. It's just one packet.

This discussion is closed to new replies.