Penetration Testing mailing list archives

Re: testing for IP address space leakage in NAT systems

From: Frank <la () pasadena net>
Date: Mon, 21 Jan 2002 09:51:27 -0800 (PST)

Normally, I use ACL's with logging enabled on border routers to test this:

http://www.pasadena.net/cisco/secure.html

Frank keney


On Mon, 21 Jan 2002, R P G wrote:

I was wondering if anyone knows of a method to test a NAT system for
address space leakage.



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Current thread:

Medium Scale Scanning Best Practices swlodin (Jan 15)
- Re: Medium Scale Scanning Best Practices Erlend J. Leiknes (Jan 16)
  - Re: Medium Scale Scanning Best Practices Gerardo Richarte (Jan 17)
- Re: Medium Scale Scanning Best Practices Renaud Deraison (Jan 17)
- <Possible follow-ups>
- Re: Medium Scale Scanning Best Practices miguel . dilaj (Jan 15)
- RE: Medium Scale Scanning Best Practices Aleksander P. Czarnowski (Jan 16)
- Re: Medium Scale Scanning Best Practices John Malconian (Jan 18)
  - Re: Medium Scale Scanning Best Practices Troy Davis (Jan 19)
  - testing for IP address space leakage in NAT systems R P G (Jan 21)
    - Re: testing for IP address space leakage in NAT systems R. DuFresne (Jan 21)
    - Re: testing for IP address space leakage in NAT systems Frank (Jan 21)
    - Re: testing for IP address space leakage in NAT systems Thomas Reinke (Jan 21)
    - Re: testing for IP address space leakage in NAT systems Gamble (Jan 22)
    - Re: testing for IP address space leakage in NAT systems Iván Arce (Jan 22)
  - Message not available
    - Re: testing for IP address space leakage in NAT systems Chris Keladis (Jan 22)