funsec mailing list archives

Re: Any ideas?


From: Robert Graham <robert_david_graham () yahoo com>
Date: Fri, 3 Apr 2009 23:14:37 -0700 (PDT)


RFCs are not the law. You can break them. I use so-called routable/non-private (although not allocated) addresses for 
my internal network. ISPs route non-routable/private addresses. Specifically, they use such addresses as part of their 
management network: they assign private addresses in the 10.x.x.x space to routers, modems, etc. 

From what I understand, cable-modem providers give a 10.x.x.x address to their cable-modems for management purposes. I 
believe the last time I had a cable modem, I saw these 10.x.x.x addresses exposed on my Ethernet.

I run traceroute through my tethered cellphone, and find that the phone company assigns 192.168.x.x addresses to 
routers. nmap scans confirm other machines in that so-called "private" "non-routable" range.

I'm sure if you ping the 10.10.167.40, you'll find that it's only a couple hops away.


--- On Fri, 4/3/09, Richard Golodner <rgolodner () infratection com> wrote:

From: Richard Golodner <rgolodner () infratection com>
Subject: [funsec] Any ideas?
To: funsec () linuxbox org
Date: Friday, April 3, 2009, 2:44 PM
When I do:

Show IP Nat Translations, I see this coming from my
wife's laptop.

 

Pro Inside global                      Inside local        
 Outside local
Outside global

tcp 24.148.6x.xxx:2022    10.10.10.98:2022     
10.10.167.40:2967
10.10.167.40:2967

 

                How does this 1918 address space route
across the internet?
10.10.10.98 is her machine. Any ideas are welcome and there
are no chat
programs allowed on our (MY) LAN, so I have ruled that out.

                Thank you and have a great weekend, Richard

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


      
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: