Audit My PC

**homie_da_clownx** · February 3rd, 2005, 10:40 PM

I'm sure that some of you are familiar with the site and the security test right? I've been wondering for a while now why it can detect your natted IP when youre using Firefox, (and if this is blockable.) and i wonder why when i use Maxthon the IE based browser it wont detect my natted IP any feedback on this would be appreciated thanks.

**infringer** · February 4th, 2005, 01:06 AM

Good question what were you using exactly to discover this ...

You sure it isnt just detecting your natted IP and not your IP native to the modem?

Or are both being discovered?

-infringer-

**cpugeniusmv** · February 4th, 2005, 09:51 AM

if it's detecting your private IP (192.168... 10....... 172........) then that is strange.

if it's detecting your public internet IP, it's because you're connecting to that website directly with your IP. the only way to "remedy" that is to use a proxy. but in my opinion, that's really unnecessary, and more trouble than it's worth.

**homie_da_clownx** · February 4th, 2005, 01:05 PM

yea its detecting my "private" IP 192.168xxx which i know isnt normal, and only with firefox on the scan at auditmypc.com, i know its usual to detect the router IP but not the natted one. see if it does it for you too and lemme know.. and like i said the IE based browser seems to block the attempt. weird.

**infringer** · February 4th, 2005, 06:54 PM

Ahhh are you in the demiliterized zone by chance?

-infringer-

**cpugeniusmv** · February 4th, 2005, 07:15 PM

that's interesting...i did it in firefox from behind a NAT, and it showed my private ip...

did it in IE too...

hm.

(and i'm not in the DMZ...i doubt that should have an effect)

**homie_da_clownx** · February 4th, 2005, 08:06 PM

weird well for your info maxthon didnt show it for me. so maybe thats a good thing, and no im not in the DMZ why dont you run it infringer and see whats up?

**homie_da_clownx** · February 5th, 2005, 08:03 AM

and i still cant find anything on this other than it uses Java to determine your real IP.

**cpugeniusmv** · February 5th, 2005, 11:20 AM

it uses javascript. i disabled javascript in the tab i was using for this in firefox, and it coudln't find my internal IP.

i really don't think this is anything to worry about...certainly not worth disabling javascript for.

**infringer** · February 5th, 2005, 05:42 PM

Really thinking about it in truth it is very possible for a javascrpt test to simply grab your internal IP as antsp2p does it as well as IRC at times I recall it grabbing internal IP.

I am curious what web test you ran though because I ran a total of like 12 security tests at 12 differnt websites and they all returned my CM IP...

However I dont think this is really an issue but if you feel the need to protect your internal IP from being exposed I reccomend that you run a static IP and simply change the last digit from time to time then that way you should have nothing to worry about as the DNS server should remain the same as long as your external IP remains the same.

-infringer-