
|
View Full Version : how to make a site not pingable?
ebird 01-04-2002, 03:25 AM Actually I am not sure what to put into the subject. Here is the situation.
My friend has a 10MB ADSL and static IP. He wants to share something with others, but not want his ip to be revealed.
He wanted to use dns2go, but I am not sure how it workes.
Would someone please tell me whether my friend asking is possible? How to achieve it?
Besides dns2go, are there any other alternatives?
Thanks.
priyadi 01-04-2002, 03:44 AM Originally posted by ebird
Actually I am not sure what to put into the subject. Here is the situation.
My friend has a 10MB ADSL and static IP. He wants to share something with others, but not want his ip to be revealed.
He wanted to use dns2go, but I am not sure how it workes.
Would someone please tell me whether my friend asking is possible? How to achieve it?
Besides dns2go, are there any other alternatives?
Thanks.
Not possible. To contact remote host, a client must know the host's IP address. DNS is only a tool to convert easy remembered names (i.e. www.example.com) to IP address.
ebird 01-04-2002, 06:25 AM I forgot to check it when I have some dns2go names at hand.
But let's say, if my friend use the ADSL line setup an ftp account and want to share something with me. He tells me to ftp example.dns2go.com. There's a way to know his IP?
I know the name and ip are associated together, but my question is, when people use something like dns2go, will his IP be revealed?
Thanks.
avara 01-04-2002, 06:37 AM Originally posted by ebird
I know the name and ip are associated together, but my question is, when people use something like dns2go, will his IP be revealed?
Unfortunately, yes.
WildWayz 01-04-2002, 07:21 AM Urm - thought u can block out ICMP traffic like tracert/ping.
It helps prevent DoS attacks.
--James
chuckt101 01-04-2002, 09:39 AM Originally posted by ebird
I forgot to check it when I have some dns2go names at hand.
But let's say, if my friend use the ADSL line setup an ftp account and want to share something with me. He tells me to ftp example.dns2go.com. There's a way to know his IP?
I know the name and ip are associated together, but my question is, when people use something like dns2go, will his IP be revealed?
Thanks.
>ping test.dns2go.com
Pinging test.dns2go.com [63.64.164.91] with 32 bytes of data:
Reply from 63.64.164.91: bytes=32 time=66ms TTL=115
Reply from 63.64.164.91: bytes=32 time=64ms TTL=115
Reply from 63.64.164.91: bytes=32 time=69ms TTL=115
Reply from 63.64.164.91: bytes=32 time=62ms TTL=115
I have no clue who "test" is.. but yeah.. you can get IP's ;)
BrianF 01-04-2002, 10:03 AM Yes, it is possible. I don't know why you're saying that its not possible to not be able to ping an ip. The ip will still be revealed, yes, but not pingable.
Get a linksys 4 port router. Then in the admin functions there is an option to turn off pinging, its not called that but I've tried it, I just forget it right now =).
Go to dslreports.com and ask for help there, the people there are really great and will help you every step of the way.
Brian
bombino 01-04-2002, 11:33 AM I don't think he's trying to disable ICMP functions specifically, I believe what he was looking for was a universal way to make that subdomain resolve to his IP, but also "not" resolve to his IP. Anyway that is impossible due to simply what DNS is. All the DNS server does is say "you're looking for sub.domain.com? oh well that's located at 192.168.1.1." Theres no way to keep the IP address private and have it still work.
The only thing I could think of is set up some type of transparent proxy on another machine -- maybe?
mattan 01-04-2002, 01:55 PM try tiny or ZoneAlarm
palmtree 01-04-2002, 03:31 PM Routers can also do this with ACL (access control lists)
See http://www.practicallynetworked.com (as mentioned above)..
laterz,
raqworld
edit:
Let me be a little clearer.. DNS2go, from what I know, would not be able to do this. You would need something on your connection side, like a router. You could write ACL's that enable traffic to come in and out, but not ping requests (ICMP), or tracerts..
I would still think there are ways to find out your ip if your smart enough, unless you are spoofing the IP..
ebird 01-04-2002, 04:08 PM Thank you very much for all the answers here. I have what I want to know here. Thanks.
|