Great Circle Associates Firewalls
(July 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE: Faking IPaddresses
From: Jesse Brown <bextreme @ geek . ptw . com>
Date: Sun, 13 Jul 1997 10:17:03 -0700 (PDT)
To: "Rouland, Christopher J" <CRouland @ EXAMNYC . lehman . com>
Cc: "'firewalls @ greatcircle . com'" <firewalls @ GreatCircle . COM>
In-reply-to: <815AF5D09FECD0119B5F0000F803AFC80BD34C @ rwwmsgwfc04 . wfc_fe_svcs1 . lehman . com>

DHCP Will Only work if you have a DHCP Compatible Client\Net Stack.. In
Which case, all you would have to do is set up DHCP (Linux can do that
to!) and then point their machine torwards your DHCP server.. Or you can
DO BootP, in which case you don't need to change anything. (But few
commercial OS's (Macintosh\Win) support BootP, and few people have DHCP
enabled.

On Sun, 13 Jul 1997, Rouland, Christopher J wrote:

> Isn't this what DHCP is for?  http://www.isc.org/dhcp.html
> 
> > -----Original Message-----
> > From:	Jesse Brown [SMTP:bextreme @
 geek .
 ptw .
 com]
> > Sent:	Sunday, July 13, 1997 3:20 AM
> > To:	Dave Whitlow
> > Cc:	David A. Baldwin; firewalls @
 GreatCircle .
 COM
> > Subject:	Re: Faking IPaddresses
> > 
> > What you are talking about is relativly easy, and would only require
> > them
> > to change their gateway IP# (and possibly their netmask, depending on
> > how
> > much work you want to do). 
> > 
> > There is a feature built into linux call IP Masquerading (also know as
> > NAT, but we won't get into that now..). What you can essentially do is
> > take any address on the inside (through ethernet or modem) that can
> > get to
> > your machine, and 'Masquerade' the Address as your own.. The machine
> > will
> > keep a database of all the outgoing, and incoming connections, and
> > route
> > them to the correct internal places..
> > 
> > Al this is done with the IPFW software that comes with just about any
> > Linux distribution (http://www.linux.org)
> > 
> > P.S. I am currently writing this on a Windows Laptop (ech!) with an IP
> > address of 10.0.0.2 on a PLIP (Parrallel Line IP - Laplink cable),
> > that is
> > masqueraded with my Linux machine at home that is dialed into a
> > dynamic
> > IP#... And I get Web, FTP, Irc, etc at 107Kbps...
> > 
> > GOD I LOVE LINUX!
> > 
> > :)
> > 
> > On Sat, 12 Jul 1997, Dave Whitlow wrote:
> > 
> > > On Thu, 10 Jul 1997, David A. Baldwin wrote:
> > > 
> > > > I have a puzzle that I am trying to figure out. I have a
> > conference room
> > > > in my company which I would like to allow guests to access the
> > internet
> > > > from to show me demo's and such. I would like to allow them to
> > plug in
> > > > their labtop into my ethernet hub in order to allow this access.
> > > 
> > > Let me understand this right.  Is this hub connected to your LAN ?
> > > 
> > > What if their address already in use in your LAN ? Is this a wise
> > approach?
> > > 
> > > > Most of my customers have labtops with ethernet cards that they
> > have
> > > > preconfigured for their own environment. I would like to allow
> > them to
> > > > plug into my ethernet without any reconfiguration on their labtops
> > > > (running WinNT or Win95). After they are plugged in, I would
> > expect that
> > > > they be able to access the internet.
> > > 
> > > It doesn't take long to change the IP address.  I often change mine
> > > numerous times when I visit a site and even with NT it only takes a
> > minute
> > > or so and the odd reboot or so.  With Linux a few seconds (an no
> > reboot)
> > > covers it.
> > > 
> > > Alternatively, give them modem or ISDN access to the Net through a
> > dial-up
> > > ISP account. 
> > > 
> > > > Does anyone have any suggestions for something like this. My guess
> > is that
> > > > this would take some sort of Dynamic Routing, and dynamic proxying
> > to
> > > > accomplish this. 
> > > 
> > > Why invent complex and uncertain solutions.  Make 'em change!
> > > 
> > > Cheers,
> > > 
> > > Dave
> > >
> > ----------------------------------------------------------------------
> > ---
> > > Dave Whitlow                            Tel: +44-(0)181-861-2001
> > > Idsec Ltd                               Fax: +44-(0)181-861-3433
> > > Suite A, 31-33 College Road,            Mail: dwhitlow @
 idsec .
 co .
 uk
> > > Harrow, HA1 1EJ, UK                     Web:  http://www.idsec.co.uk
> > > 
> > 
> 



References:
Indexed By Date Previous: Re: PGP provided by ISP's
From: James Morris <jmorris @ intercode . com . au>
Next: Re: PGP provided by ISP's
From: Douglas McNaught <doug @ ono . tc . net>
Indexed By Thread Previous: RE: Faking IPaddresses
From: "Rouland, Christopher J" <CRouland @ EXAMNYC . lehman . com>
Next: RE: Faking IPaddresses
From: "David A. Baldwin" <daveyb @ bigdipper . iagi . net>

Google
 
Search Internet Search www.greatcircle.com