Re: Blocking direct private IP address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Andrew Kraslavsky a écrit :

2) The reason I care about not allowing the private address to work directly is that, well, it is a private address and should not be meaningful on the public network and why give clues to any hackers out there?

s/hackers/bad guys/

What kind of clue do you give by allowing direct access with the private address ? First, people can use it only if they already know it. Second, what can they do with the private address that they could not already do with the public address ?

Perhaps the confusion surrounding this interest was again clouded by my attempt to keep my example simple -- I used 10.0.0.1, a reserved private address, as my public IP address in my explanation while in reality the public IP address is one that is valid on the Internet.

You could use instead the 192.0.2.0/24 range which is reserved for documentation and examples.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux