Security Basics mailing list archives

RE: 'masking' or 'hiding' am ip address from a web browser


From: "Hagen, Eric" <ehagen () DenverNewspaperAgency com>
Date: Fri, 24 Oct 2003 12:55:33 -0600

The browser shows whatever site it thinks it's viewing.  So... if your
server is only accessable by and IP, then that's what the browser will show.
There is a "stupid browser trick" where you can put a framset HTML page out
on a DNS-supported server somewhere and then make a single full screen frame
that contains your app.  in this way, only the URL of the frameset HTML is
displayed, even though you are viewing a page on your local page.

This can be misleading to the user because it conceals all of the
command-line arguments and other things...  no matter what you do in your
app, the URL bar will always show "http://www.mysite.com/myapp/"; which is
where the frameset is hosted, even if the contents of the screen change or
link off-site (of course, unless your app uses "target=_TOP" in it's
external links).

Eric

-----Original Message-----
From: Bryan Sultanik [mailto:Bryan.Sultanik () tdh state tx us]
Sent: Friday, October 24, 2003 6:49 AM
To: 'security-basics () securityfocus com'
Subject: 'masking' or 'hiding' am ip address from a web browser


How can I mask or hide my ip address behind a 'friendly name' when users
access my web app via web browser. Currently, when they hit the app, their
browser shows  192.xx.xxx.xx instead of 'myserver'. I am running Web logic 7
on a Win2k server, have specifically chosen not to register the server in
our enterprise DNS for security reasons. 

Thanks in advance.
--Bryan


---------------------------------------------------------------------------
Visual & Easy-to-use are not words that you think of when talking about 
network analyzers. Are you sick of the three window text decodes? Download
ClearSight Network's Analyzer and see a new network analysis tool that 
makes the complex - easy
http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_0310
21
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Visual & Easy-to-use are not words that you think of when talking about 
network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new 
network analysis tool that 
makes the complex - easy
http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021
----------------------------------------------------------------------------


Current thread: