Skip The IP Address

← Back to Stories (view on slashdot.org)

Posted by Hemos on Monday December 29, 2003 @12:33AM from the who-needs-'em dept.

j0hnyb1423 writes "Have you ever wanted to be able to connect to that stackless Snort or Hogwash box without walking over to it and plugging in a monitor and keyboard? Well, at last here's your answer - noiptun. Yes, it requires an IP stack to be compiled into the kernel but no IP addresses necessary on the real interface(s). And if stealth IDS setups aren't your bag, then you can at least use it to browse /. without having an IP bound to your linux workstation."

6 of 24 comments (clear)

Min score:

Reason:

Sort:

Is it just me.. by mivok · 2003-12-29 00:43 · Score: 3, Insightful

or does this sort of defeat the whole point of having a box that you can't connect to over the network in the first place? Whats to stop an attacker connecting through the tunnel to the noip'd box?
1. Re:Is it just me.. by hbackert · 2003-12-29 00:57 · Score: 4, Informative
  
  Whats to stop an attacker connecting through the tunnel to the noip'd box?
  
  The box itself will stop such traffic (only if it's a known exploit though). The bad traffic usually comes from outside. The management and this tunnel is supposed to connect from the internal network. The problem with such bridging boxes is, they either don't have an IP address and are only administratable via the console or configurable via booting/floppy/CD, or they have another interface with a secure network to administer. Switches usually have a dedicated network for their administration. In the latter case, the box has an IP address. In all cases, administration is not supposed to be done via an in-band network connection.
  
  The whole point of this noiptun is to get rid of this extra interface which is usually needed to do some kind of administration.
2. Re:Is it just me.. by Anonymous Coward · 2003-12-29 01:44 · Score: 3, Funny
  
  Nevermind. I'm a moron.
  How do you know?
Your computer.... by Anonymous Coward · 2003-12-29 03:25 · Score: 4, Funny

is NOT broadcasting an IP address. You're safe, please move along.
Re:It's backwards client server by j0hnyb1423 · 2003-12-29 07:10 · Score: 4, Informative

the machine running the client is usually assumed to be running on a bridge interface with no IP of its own. As such it won't be discarding any packets. As far as the naming scheme for client/server, there is actually a good reason why the IP-less side is running the client while the end connecting to it is called the server. When the project began, the idea was to be able to use one "server" to connect to many clients, this functionality isn't currently there and there is at the moment only a one-to-one possible relationship, but the naming scheme makes sense viewed from that angle.
Re:It's backwards client server by ivan256 · 2003-12-29 08:15 · Score: 5, Informative

What?

The end that sits there passively waiting for someone to connect is called the "client", and the end you run when you want to talk is called the "server".

That's not how X works, nor is the terminology backwards. In X, the resource that's being served is the terminal (the display and input devices). The server sits around waiting for the clients (applications) to connect to it.

The problem is that you think server means remote and client means local, and that's just wrong; it's actually about who is providing resources and who is consuming them.