[Dshield] little experiment

Brance Amussen :)_S brance at jhu.edu
Wed Mar 2 15:20:46 GMT 2005


So where does the java code in the browser get it from? Can't be the mail
client hooked to the browser can it?? 

B :)_S
  

-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of Johannes B. Ullrich
Sent: Tuesday, March 01, 2005 5:43 PM
To: General DShield Discussion List
Subject: Re: [Dshield] little experiment


> How do you get the "behind firewall address"?? 

its a little bit of javacode I found. Essentially, it tells your browser to
reload the page, but adds the IP address of your system to the end (you will
see 'IP=1.2.3.4' at the end of the URL).

There are a couple of tricks to just display it locally with javascript. 
But so far, I have only seen java code that was able to actually send it to
the server.

As others have commented, many e-mail clients (e.g. mine) add it to the
header, or mail servers add them if they are inside the natted network.

If someone knows how to tell thunderbird not to send the IP as part of the
'helo', let me know ;-)







More information about the list mailing list