any way to do...

p3nguin · Apprentice Joined: 01 Jul 2003 Posts: 188 Location: ~/

just wondering if its possilbe to ping or traceroute to a machine, from outside the lan, to a specific machine on the lan. If the lan has manual ip addresses, how can you ping a specific machine from outside?

ClausH · Posted: Wed Sep 17, 2003 6:35 pm Post subject:

as i have understood, it is not. to do this, you would need to specify a new ip for the packet to follow, when it arrived at some host (the router), and the ip protocol does not support this.

Just something i heard somewhere...

Mvh Claus Holmgaard

kashani · Posted: Wed Sep 17, 2003 7:13 pm Post subject:

I'm not usre I understand the question.

machine outside the LAN 66.a.b.72
machine inside the LAN 72.c.d.108

What's to stop you from pinging or tracerouting to any IP? Unless the LAN is firewalled and the internal machines are on non routable RFC 1918 space in which case you can't without forwarding packets to the internal machine or setting up a static nat to it or other interesting things.

kashani
_________________
Will personally fix your server in exchange for motorcycle related shop tools in good shape.

lazarous · Posted: Wed Sep 17, 2003 8:34 pm Post subject:

Why dont you just do a port forward on the router to the machine and ping using the port you assign to each machine.
_________________
http://www.kuro5hin.org/story/2002/4/13/182028/722

christsong84 · Posted: Wed Sep 17, 2003 10:03 pm Post subject:

ok...inherent problem with tracerouting to a LAN machine...the ip is not registered on the internet. Internally, IP's are totally hidden from the internet. So it wouldn't work just in the inherent setup of the computers. You can traceroute as far as the firewall or Router standing at the edge of your network but that's it (coming fom the outside).
_________________
while(true) {self.input(sugar);} :twisted:

meowsqueak · Posted: Wed Sep 17, 2003 10:13 pm Post subject:

I wouldn't say it was a problem - more a design feature! Being unable to directly access interfaces on an internal LAN from the public internet is a good thing (for the LAN owner)