Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 1 year ago.
Improve this question
Edit:
So apparently these are not really IP-addresses but rather hostnames.
I tried out the netstat to find any suspectful connections and then I found quite some remote-addresses that were really weird to me, for example the following:
ec2-3-235-82-211:https
fra24s07-in-x0a:https
g2a02-26f0-0300-0000-0000-0000-5c7a-f589:https
wm-in-xbd:https and
156:https
I was wondering what any of these mean and also what the in means at 2. and 4.?
Those are not IP addresses. They are hostnames that come from reverse DNS resolution, with most of the name cut off due to how netstat presents them. By passing --notrim you should be able to see the full hostnames. Alternatively, passing --numeric will disable hostname resolution altogether.
Taking a guess:
3.235.82.211, hosted on Amazon EC2. Looks like it's owned by Zoom (checked https certificate)
fra24s07-in-x0a.1e100.net, google infrastructure of some kind (I googled the fra24s07-in-x0a string, and 1e100.net is google owned). Going to that url over https gives me a google 404 page.
2a02:26f0:0300::5c7a:f589, an IPv6 address, used by Akamai (a content delivery network provider), found by going there and seeing the HTTPS certificate
Unclear. Maybe wm-in-xbd.1e100.net (another google IP); going to that url over https gives me a google 404 page.
Unclear
Related
Closed. This question is not about programming or software development. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 4 days ago.
Improve this question
I ve a local webserver. I use it for my guests to scan QR Codes and order/view menus etc. The server has local IP "10.0.0.250" , available to all guests and the domain name is "orderfood.gr" (Static dns set on Mikrotik orderfood.gr = IP 10.0.0.250). I am redirecting all port 53 traffic to the router in order to avoid guests with static DNS such as 8.8.8.8, 1.1.1.1 etc (and that works fine). However some mobiles cannot translate the IP of the domain. After struggling i've found that most times this happens is because of the Private DNS service (set ON by default on some mobiles). Is there a way i can prevent this from happening ?
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 5 years ago.
Improve this question
Using static routes is it possible to access a host with an IP address of 1.2.3.4 on port 4000 that is connect to rtrnode on a wlan network that has a public ip address of x.x.x.14 from a remote host (h1)?
h1 -------router-------INTERNET-------(public IP(x.x.14)) = rtrnode(1.2.3.3)---------destination(1.2.3.4)
NO: Unless:You tunnel. This way the foreign LAN is a hop from the LAN you are on according to the routers on both ends that handle the packetizing and perform the VPN. It is easiest to set this up using firewalls like : PFSense or the likes. This link explains, there are many more: http://www.makeuseof.com/tag/vpn-tunnel-set/. You cannot route across the Internet with static routes unless you have control over the routers that are routing. They run BGP and will direct your traffic to the valid IP you are incorrectly using in your private LAN.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
I want the IP address of https://sfbay.craigslist.org.
C:\Users\dude>ping https://sfbay.craigslist.org
Ping request could not find host https://sfbay.craigslist.org.
Please check the name and try again.
So, I tried nslookup. None of the IP's in the output allow me to connect to the website using a browser. How do I get the right IP & connect ?
C:\Users\nisum>nslookup https://sfbay.craigslist.org/
Server: cachens1.paetec.net
Address: 66.155.216.122
Non-authoritative answer:
Name: https://sfbay.craigslist.org/
Addresses: 104.239.198.84
198.105.254.65
Pings usually don't include the protocol. The command below worked for me.
ping sfbay.craigslist.org
you can't access to this webSite with the adresse IP because : this domain name is one of many subdomain that use one adresse IP : 208.82.237.2, for this you can just access with a Sub DNS.
here is the main site with details :
Details of 208.82.237.2
IP Address : 208.82.237.2
Location : United States (95% accuracy)
Host Name : cities.craigslist.org
you can use this link to test it : www.hcidata.info
also you can refer to this link : StackOverFlow
Maybe
Ifconfig sfbay.craigslist.org
Or
dig sfbay.craigslist.org
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 8 years ago.
Improve this question
Do I need to forward these ports? Is there a way to do it on Windows 7? I've tried using a program named smart port forwarding but it crashes when the program is running. Thanks in advance.
You shouldn't need to forward those ports in order to be able to run the applications. Chrome and Steam are connecting through those ports to the internet because they are ones that the operating system says are available for outgoing connections and provided them with that unique port number when each application asked for it.
These applications should all run fine for you, without needing to open any ports. Opening a port is most always to let incoming traffic be accepted, not for outgoing traffic to be stopped. A telltale sign that a port is not open is that no connection can be made. If you tried to connect over the internet (port 80) to most random IP addresses, you won't be able to find anything, because the device at that IP address rejected your attempt to open that port to them. So because you are (I am assuming) able to successfully run both Chrome and Steam and have them be able to connect to the internet, you shouldn't be facing a port forwarding issue. The port numbers are just assigned essentially at random each time that an application needs to open an outgoing socket. (this being a simplification of the whole paradigm, but hopefully enough to be able to answer this question).
Edit: And yes, like #Rumesh-Eranga pointed out as well, port forwarding is done at the router level (on the internet router itself) and not at the computer level. It's a way of saying to the router "alright, any time this network receives a request to open port XYZ, send it to this computer that is connected to our local network."
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 9 years ago.
Improve this question
On Windows 7 I have an SSH tunnel running on my local 127.0.0.1:34567 address that I need to access so I can access 12.34.56.78:8080 with the help of SSH proxying for me as I cannot access that IP directly (due to not being on the whitelist).
My basic simple goal therefore is that on Windows whenever I request 12.34.56.78:8080 from anywhere (my browser for instance), I would like the request to instead be diverted to 127.0.0.1:34567 transparently, and I would like a software solution to this instead of a hardware one if possible. I think this is what's usually achieved in Linux by something called iptables, but I'm looking for something I can use on windows.
Does anyone know how this is possible? If I need to use any external Windows program for this, that is fine, but I prefer it to be free.
EDIT: please do not present me with reverse tunnel solutions. My goal is to request the same ip:port that I'm blocked from, but to be able to get to that ip:port successfully through the means of my existing SSH tunnel. Reverse tunnels involve requesting a different ip:port which is not what I'm looking for (I already have a forward tunnel I can use if I wanted to make requests to a different ip:port).
Example scenario: Pretend that you have an C-compiled .exe file whose source code you don't have access to that is hardcoded to request 12.34.56.78:8000 for SOAP webservices. The problem is, your IP is blocked from that ip:port, but you do have access to an SSH server which isn't blocked by 210.212.239.117:8080 and also have an SSH tunnel set up for that SSH server to access that ip:port... but your .exe has the original ip:port hardcoded, so you can't just tell it to request the SSH tunnel ip:port, as it's not possible to change the ip:port to be requested in any way due to it being hardcoded! You would have to have the request to 210.212.239.117:8080 on your computer somehow diverted to your SSH tunnel on the OS level. So how would you get that done?
EDIT 2: I'm not looking for routing tables either (I think). I don't want to modify the route my request goes through to reach target ip:port; I actually want to have the requested ip and port themselves silently changed. I kind of want to achieve something like the hosts file, except instead of resolving hostnames to ips, I want ip:ports to be reresolved to different ip:ports.
Bounty: Sorry, it appears this stackoverflow question of mine counts as Offtopic and isn't eligable for offering a bounty, so sorry to anyone who put in extra work and would have potentially received the bounty!
I haven't found a ready executable, but WFPSampler seems to be promising. It uses the new Windows Filtering Platform API (available since Windows Vista) to manipulate packets.
To use it for redirecting outgoing packets, give a look at Q&A section, there are many examples.
Check out BarbaTunnel: http://barbatunnel.codeplex.com/
TCP-Redirect mode is probably what you're looking for.
You can use a reverse shell. It can mirror a remote port. Use ssh to connect with -R option. For example ssh -R xxxx:localhost:xxxx user:pass#www.server.com. Check this out:http://www.debianadmin.com/howto-use-ssh-local-and-remote-port-forwarding.html.