Re: strange ip address reported by nftables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



François Patte wrote:
>>> The problem is: how an IP from a private network (10....) could reach
>>> my machine through the internet?

Tim:
>> WiFi?

François Patte:
> I don't understand your question. The machine is connected to the box 
> with an ethernet cable?

It was a thought that maybe there was more one network connection
involved.  We don't know your LAN.

Many home modem/routers also have WiFi, and it can use a different
private IP range for the WiFi as a way of separating ethernet data from
WiFi data.


>> Smart devices within your home?

> What do you call "smart devices"? Something like Amazon Alexa? No, I 
> haven't.

Yes, term "smart devices" is a bit misnamed, it really just means
things that are network controllable, but never used to in the past, it
doesn't necessarily mean they're actually smart.  So, as well as things
like Alexa, there's light bulbs, doorbells, timer switches, heating
controllers, electric car chargers, etc.


>> Does your ISP have real public IPs, or are they NATing you?

> How can I know this?
> 
> ifconfig reports 3 IP addresses:
> - 192.168.1.16 which is my private network

That's a private IP.  I presume your computer goes through a
modem/router between you and the ISP?  Normally that blocks other
private IPs from being able to connect.

If you have a modem/router, looking at its configuration to see what
its public address is will tell you.

If you are directly connected to your ISP (no modem or router) with
such an IP, then the ISP is doing Network Address Translation.

Many years ago my ISP used the 10.0.0.0 range for its own internal
services (mail, web, news, etc), though you'd only know it by looking
at mail headers of the things it passed through.  As things went in and
out of them, the connections to everything outside of them were using
public IPs.  Normally such IPs (10.x.y.z ranges) can't traverse from
one network to another, but if an ISP is already doing NAT for you,
they could do something that breaks the rules.

> and 2 IP V6 :
> - fe80:.... my private network
> - 2a01:cb14:.... routable IP from my ISP (Orange)

I'd probably discount them being part of a problem with a 10.x.y.z IPv4
address.  You'd need to have some IPv6 to IPv4 gateway for something to
be able to cross over.

Do you have other things connected to your LAN?  Things that are
sometimes connected to another network?  When reconnecting to your
network they can first try using their prior address, then try to use
an address from your own LAN.

The other thing that springs to mind is IP spoofing.  That those
connection attempts come from something that faked its real IP.

But I'm leaning towards thinking it's something within your ISP.

-- 
 
uname -rsvp
Linux 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux