RE: Company Firewall's IP Address

["John Tolmachoff" <sflist-secbasic () reliance net>]

The external interface for your firewall will always show up. Otherwise, how
do you think the packets you requested through HTTP session will find its
way back to you?

All they are doing is reading the from IP address in the packets.

That is really nothing more that scare tactics for a program.

Just because some one knows the IP address of the firewall does not mean
they can do any thing. It is up to the configuration of the firewall to
prevent issues.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


-----Original Message-----
From: tony tony [mailto:tonytorri () yahoo com] 
Sent: Tuesday, November 12, 2002 2:09 PM
To: security-basics () securityfocus com; Cisaca
Subject: Company Firewall's IP Address

I was doing security research on the internet at work yesterday....when all
of
a sudden I got a pop up advertisement that stated that I was broadcasting my
IP
address to the entire internet.  It then showed a screen with my IP address
which was the the external IP interface of one of our companies firewalls. 

It just bothers me that someone would be able to determine the IP address of
our firewall that easily.  It seems to me that our firewall should operate
in a
more stealth mode.  Our firewall administrator said it is not technically
possible to do this.  What is your take?.I am not a checkpoint firewall
guru.so
I do not know.   All I know is that if I was a hacker, I would love to
hammer
away on an ip address that represented a firewall. 

Click on the following to learn more about this pop up site. 

http://www.bonzi.com/internetalert/ia99m.asp


__________________________________________________
Do you Yahoo!?
U2 on LAUNCH - Exclusive greatest hits videos
http://launch.yahoo.com/u2