Web Hosting Talk







View Full Version : how to make a site not pingable?


ebird
01-04-2002, 03:25 AM
Actually I am not sure what to put into the subject. Here is the situation.

My friend has a 10MB ADSL and static IP. He wants to share something with others, but not want his ip to be revealed.

He wanted to use dns2go, but I am not sure how it workes.

Would someone please tell me whether my friend asking is possible? How to achieve it?

Besides dns2go, are there any other alternatives?

Thanks.

priyadi
01-04-2002, 03:44 AM
Originally posted by ebird
Actually I am not sure what to put into the subject. Here is the situation.

My friend has a 10MB ADSL and static IP. He wants to share something with others, but not want his ip to be revealed.

He wanted to use dns2go, but I am not sure how it workes.

Would someone please tell me whether my friend asking is possible? How to achieve it?

Besides dns2go, are there any other alternatives?

Thanks.

Not possible. To contact remote host, a client must know the host's IP address. DNS is only a tool to convert easy remembered names (i.e. www.example.com) to IP address.

ebird
01-04-2002, 06:25 AM
I forgot to check it when I have some dns2go names at hand.

But let's say, if my friend use the ADSL line setup an ftp account and want to share something with me. He tells me to ftp example.dns2go.com. There's a way to know his IP?

I know the name and ip are associated together, but my question is, when people use something like dns2go, will his IP be revealed?

Thanks.

avara
01-04-2002, 06:37 AM
Originally posted by ebird
I know the name and ip are associated together, but my question is, when people use something like dns2go, will his IP be revealed?

Unfortunately, yes.

WildWayz
01-04-2002, 07:21 AM
Urm - thought u can block out ICMP traffic like tracert/ping.
It helps prevent DoS attacks.

--James

chuckt101
01-04-2002, 09:39 AM
Originally posted by ebird
I forgot to check it when I have some dns2go names at hand.

But let's say, if my friend use the ADSL line setup an ftp account and want to share something with me. He tells me to ftp example.dns2go.com. There's a way to know his IP?

I know the name and ip are associated together, but my question is, when people use something like dns2go, will his IP be revealed?

Thanks.

>ping test.dns2go.com
Pinging test.dns2go.com [63.64.164.91] with 32 bytes of data:

Reply from 63.64.164.91: bytes=32 time=66ms TTL=115
Reply from 63.64.164.91: bytes=32 time=64ms TTL=115
Reply from 63.64.164.91: bytes=32 time=69ms TTL=115
Reply from 63.64.164.91: bytes=32 time=62ms TTL=115


I have no clue who "test" is.. but yeah.. you can get IP's ;)

BrianF
01-04-2002, 10:03 AM
Yes, it is possible. I don't know why you're saying that its not possible to not be able to ping an ip. The ip will still be revealed, yes, but not pingable.

Get a linksys 4 port router. Then in the admin functions there is an option to turn off pinging, its not called that but I've tried it, I just forget it right now =).

Go to dslreports.com and ask for help there, the people there are really great and will help you every step of the way.

Brian

bombino
01-04-2002, 11:33 AM
I don't think he's trying to disable ICMP functions specifically, I believe what he was looking for was a universal way to make that subdomain resolve to his IP, but also "not" resolve to his IP. Anyway that is impossible due to simply what DNS is. All the DNS server does is say "you're looking for sub.domain.com? oh well that's located at 192.168.1.1." Theres no way to keep the IP address private and have it still work.

The only thing I could think of is set up some type of transparent proxy on another machine -- maybe?

mattan
01-04-2002, 01:55 PM
try tiny or ZoneAlarm

palmtree
01-04-2002, 03:31 PM
Routers can also do this with ACL (access control lists)
See http://www.practicallynetworked.com (as mentioned above)..

laterz,
raqworld

edit:
Let me be a little clearer.. DNS2go, from what I know, would not be able to do this. You would need something on your connection side, like a router. You could write ACL's that enable traffic to come in and out, but not ping requests (ICMP), or tracerts..
I would still think there are ways to find out your ip if your smart enough, unless you are spoofing the IP..

ebird
01-04-2002, 04:08 PM
Thank you very much for all the answers here. I have what I want to know here. Thanks.