Re: Testing load balanced servers behind NAT

From: Carlos Carvalho (carlosat_private)
Date: Sat Sep 08 2001 - 08:17:54 PDT

  • Next message: Alan Davies: "RE: White Hat Hacking / Security Training in the UK"

    Alex Butcher (alexat_private) wrote on 7 September 2001 10:08:
     >Andrew Koh wrote:
     >
     >> On getting internal IP:
     >> Besides misconfigured  DNS and snmp, are there any other ways to find 
     >> out internal host IP?
     >
     >Sometimes requesting non-existent files using HTTP (you don't say the 
     >servers are running this, but...) can reveal internal IP addresses in 
     >the error messages.
    
    Sometimes email headers also reveal internal IPs or hostnames, such as
    our case right now.
    
    However I don't see the usefulness of having internal IPs, since
    they're unreachable from the outside anyway. And once you're inside,
    it's not at all a secret...
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Mon Sep 10 2001 - 08:07:34 PDT