Results 1 to 8 of 8
  1. #1
    surfinmdq is offline Member
    Join Date
    Oct 2009
    Posts
    4
    Rep Power
    0

    Exclamation Java is revealing my Private IP (router IP) to Internet

    Hi, first post here, this is a question about networking security in java.

    Few days ago I installed a wireless D-Link DIR-600 router with my main machine connected via cable to it.

    It works great, it have a built-in firewall with Statefull Packet Inspection with WEP,WPA,WPA2 and so on.

    However, I was a bit curious about what AuditMyPC.com and other security-test sites would say so I did a security scan and found that, behind my visible internet IP, the local private IP was being broadcasted to the internet thru, AuditMyPC.com says, a bug in Java.

    I know this isn't exactly a very great problem, being my computer another one home machine connected to the net, not a corporate one, and having local firewall running in my Linux box, but I would like to know if there's any way to just cloack the private IP or better stop broadcasting it.

    Any suggestion welcomed, thanks :)

  2. #2
    Eranga's Avatar
    Eranga is offline Moderator
    Join Date
    Jul 2007
    Location
    Colombo, Sri Lanka
    Posts
    11,371
    Blog Entries
    1
    Rep Power
    20

  3. #3
    neilcoffey is offline Senior Member
    Join Date
    Nov 2008
    Posts
    286
    Rep Power
    6

    Default

    I'm not sure of the details, but don't confuse "security issue" with "we want to sell you a proxy server".

  4. #4
    surfinmdq is offline Member
    Join Date
    Oct 2009
    Posts
    4
    Rep Power
    0

    Default

    Dear Eranga, Neil,

    Hi, thank you for your time.

    Eranga: yes I'm, java is up-to-date and I have autoupdate feature on.
    Neil: while what you say is pretty *right* I still would like to find a way to mask real private IP.

    As a side note, the real Private IP of any private network can be discovered via small Java code as proved in that site (AuditMyPC).

    Anyways, thank's again for your time pals :)

  5. #5
    neilcoffey is offline Senior Member
    Join Date
    Nov 2008
    Posts
    286
    Rep Power
    6

    Default

    Is it definitely Java and not Javascript they're using? I think the applet security manager is supposed to prevent unsigned applets from reading the "private" IP (and if it's a signed applet, a warning message should appear).

    I also wonder if it's such a big deal.

  6. #6
    surfinmdq is offline Member
    Join Date
    Oct 2009
    Posts
    4
    Rep Power
    0

    Default

    Really don't know :(

    If you ever have time please make a check for yourself here: auditmypc.com/anonymous-surfing.asp

    I want to point in my case the site warns me about my internal proxy at the end of the main data box. However I think in the event I don't use my router to connect to internet, that info will not appear.

    Thanks!

  7. #7
    Eranga's Avatar
    Eranga is offline Moderator
    Join Date
    Jul 2007
    Location
    Colombo, Sri Lanka
    Posts
    11,371
    Blog Entries
    1
    Rep Power
    20

    Default

    Quote Originally Posted by surfinmdq View Post
    Eranga: yes I'm, java is up-to-date and I have autoupdate feature on.
    For a min, if you can disable auto-update and see what's going on. Few years back I got the quite similar issue that updater conflict with the Client Server Runtime in my old XP machine. Still I'm not 100% sure that this cause Trojan or something, but once the auto update disable everything is fine.

  8. #8
    surfinmdq is offline Member
    Join Date
    Oct 2009
    Posts
    4
    Rep Power
    0

    Arrow

    I disable the auto updater feature but it's of no use.

    I'm giving up for the moment since this is not a critical issue. However I'll continue researching and when I find what's going on and how to fix it I'll post back with the solution.

    Thank you very much for your time!
    Best,

    Martín

Similar Threads

  1. router working?
    By priya deshpande in forum Networking
    Replies: 0
    Last Post: 10-09-2009, 07:52 AM
  2. Private Java tutor in Houston?
    By antgaudi in forum Jobs Offered
    Replies: 7
    Last Post: 08-11-2009, 05:00 PM
  3. Private Java Tutor Service. One on One.
    By bharatchhajer in forum Java Software
    Replies: 2
    Last Post: 01-26-2009, 06:54 PM
  4. Help - problem with java when using internet
    By badabing in forum New To Java
    Replies: 1
    Last Post: 08-07-2007, 02:39 PM
  5. Internet Explorer java version
    By shimer in forum Java Applets
    Replies: 2
    Last Post: 07-31-2007, 08:30 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •