Use IPTables to block access to internal network resources #194

New issue

Closed

opened 2022-10-03 13:08:11 +00:00 by aryak · 3 comments

aryak commented

2022-10-03 13:08:11 +00:00

Currently, a malicious user can access things in the internal network of @a.
Using a rule like this could prevent this.
iptables -A OUTPUT -d 192.168.1.0/24 -j REJECT --reject-with icmp-net-unreachable
With the limited testing i did, going to dsldevice.attlocal.net gave me the MAC address of the devices connected too..
I am not sure if this would mess with port forwarding tho..

Currently, a malicious user can access things in the internal network of @a. Using a rule like this could prevent this. `iptables -A OUTPUT -d 192.168.1.0/24 -j REJECT --reject-with icmp-net-unreachable` With the limited testing i did, going to dsldevice.attlocal.net gave me the MAC address of the devices connected too.. I am not sure if this would mess with port forwarding tho..

a commented

2022-10-03 14:22:53 +00:00

Owner

I added the ufw rule ufw deny out to 192.168.1.254 port 80. I think this should be enough to prevent exposure of the MAC addresses, but let me know if more needs to be done.

I added the `ufw` rule `ufw deny out to 192.168.1.254 port 80`. I think this should be enough to prevent exposure of the MAC addresses, but let me know if more needs to be done.

👍 1