Printable View
hi tehere and ty for your responses as usual
i have adsl connection through adsl modem with integrated router and nat firewall .have static address.
how safe is that from me being attacked??
since i have opted for static address i have not had any alert from my zone alarm(maybe because my ip is not any more on nett?
may please somone excplain too me little bit how it works and how safe i really am
thnks
sry xp pro with sp2
adsl 512/128
So let me get this straight... You have a router, and your computer behind the firewall/router has a static IP that is no longer on the internet because it's behind the router, right? Now the routers IP address is on the net.
Ok, well if your computer is behind the router it shouldn't matter, but it would still be a good idea for your router to have dynamic IP.
I hope read and answered your question right ;)
If you can view website, trust me, your IP is online. Sure dynamic IP's change every tiem you sign on, and that's better IMO, but static IP's are well the same, it just depends how much you secure your computer, if the box is updated and safe anough, you shouldnt have any problems wheter it's a dynamic or static IP. IT's also not bad to change your IP from time to timeQuote:
my ip is not any more on nett?
[i wrote a tip in the Tips and Tricks forum how to change static IP's, you can visit it]
http://www.antionline.com/showthread...hreadid=263368
Depends on how you look at it:
From an internet stand point where you get a new IP every time you sign on, then perhaps that is better than a static. However there are trade offs and I ask "is it really more secure" any vulnerabilites you have will be present wether you have dynamic or static addresses. What little security you gain is making yourself a moving target versus a stationary one. The value in security is slim and the benefits of a static ip in terms of hosting and secure remote access could be essential.
From a net admin standpoint static addresses allow you to disable DHCP which helps prevent unauthorized access to open network (CAT5) ports. With that comes a much higher overhead in IP maintenance so it's only really effective in small networks.
So basically, to answer your question about security, the only gained security you will get is extra protection from DOS attacks and if a cracker get's your IP and then it changes, the IP the hacker has is worthless
Hi
as for static/dynamic IP:
In my opinion, as already stated partly by RoadClosed, there is no difference at all,
from a security point of view, whether you have a static or dynamic IP to the external
world (internet). The address range of IP numbers provided by the ISP is usually quite narrow,
so once an "attacker" knows your IP, it does not take much to update your IP in his database.
as for your NAT Router and incoming traffic:
One of the reaons, why your ZA does not pop up (almost) any incoming traffic flags
anymore is the following: Your router needs to know where to forward incoming
packages to. These settings, for example, are done in the SUA setup of your router.
Per default, no incoming traffic is forwarded, hence, usually, no "attacker" will be able
to get to your box that is behind the Router. Note, there is no need to forward
incoming traffic, except you have some running servers, like webserver, mailserver, ...
Cheers
/edit: As for DoS attacks. There is no additional protection with dynamical IP. You
might have additional protection from a badly-written (reversed) DDoS-attack, but
since your ISP updates the dynamic IP once per 48hours or so only, even that is
not given.
Sure there is, if someone is DoSing you, the IP will change soon, since it changes the DoS stops and now the attacker needs to find the IP again. And it might not be hard to find the new IP since he already knows the range in wich your ISP is in, but honestly, who is going to try 300 or more possibilites?? No one with a life...Quote:
As for DoS attacks. There is no additional protection with dynamical IP.
That is if the person hasn't dropped something on the computer already ;). I'm gonna go with CopyRight on this one...no matter if its static of dynamic, the computer will be as safe as you secure it. If you have your firewalls and AVs in place, and use common sense, you will be pretty safe (Although never totally safe). For a person to DOS you, you must have something important to them...haven't seen too many people DOS home users for no apparent reason. Usually its a grudge, revenge, or trying to use it as a distraction for something else. You also need to consider how long does your computer usually stay connected to the internet, do you ever let it run all night or do you shut it down every time you do not use it? Common sense is your best defense though.Quote:
Sure there is, if someone is DoSing you, the IP will change soon, since it changes the DoS stops and now the attacker needs to find the IP again. And it might not be hard to find the new IP since he already knows the range in wich your ISP is in, but honestly, who is going to try 300 or more possibilites?? No one with a life...
Take care.
Well I totally agree to, but I'd rather have a dynamic IP the static IMHO
Duck:
There are downsides to dynamic addresses.... You can't get to your own stuff so easily from other locations because you don't know the IP to connect to is a biggie.
The point is that if all you can do is DoS me because my IP is static then what's the problem... ID the DoS, call the ISP and as them to block it or cjange your IP..... How hard is that? Any other kind of attack should be patched/blocked/mitigated anyway!
To add to that...you can also just block all packages from the IP that is DOSing you at the router.Quote:
The point is that if all you can do is DoS me because my IP is static then what's the problem... ID the DoS, call the ISP and as them to block it or cjange your IP..... How hard is that? Any other kind of attack should be patched/blocked/mitigated anyway!
Or they can simply look at your IP via any of the myriad of services (who doesn't use IM's nowadays?) most users user, and eliminate the guessing.Quote:
Originally posted here by The Duck
Sure there is, if someone is DoSing you, the IP will change soon, since it changes the DoS stops and now the attacker needs to find the IP again. And it might not be hard to find the new IP since he already knows the range in wich your ISP is in, but honestly, who is going to try 300 or more possibilites?? No one with a life...
In theory. :DQuote:
Originally posted here by Tiger Shark
The point is that if all you can do is DoS me because my IP is static then what's the problem... ID the DoS, call the ISP and as them to block it or cjange your IP..... How hard is that? Any other kind of attack should be patched/blocked/mitigated anyway!
That won't stop a DoS if it's just a raw packet flood (which many/most are nowadays). If it fills your pipe your ISP has to drop the route.Quote:
Originally posted here by Cybr1d
To add to that...you can also just block all packages from the IP that is DOSing you at the router.
Then how would one go about stopping a DoS nowadays if just raw packets are sent?Quote:
Originally posted here by chsh
That won't stop a DoS if it's just a raw packet flood (which many/most are nowadays). If it fills your pipe your ISP has to drop the route.
Call your provider. Only someone upstream can block a bandwith flooding DoS.
It could be argued that in such a case, changing IP would stop the attack from reaching... you... and only momenterarly (as the attacker most likely has some other means of tracing your IP if he was able to target you at first). And the pour sole who would get assigned that ip after you might very well be the innocent victim of that lost bullet (for some while).
Ammo
Forgive me for my ignorance... But how is a box thats behind a router safe from hackers ??.
Can't a hacker who has physical access to the box install a Trojan and remotely control the box later ??.
I forgive you :D. A router will not protect you from hackers with physical access to the box. It was not designed for that. The hacker would have to do a little more that just drop a trojan in the box. If the box was set up properly, the trojan would not be allowed to connect to the hacker's client, so the hacker would have to either disable the firewall, or change its settings to allow his trojan to connect outside.Quote:
Forgive me for my ignorance... But how is a box thats behind a router safe from hackers ??.
Can't a hacker who has physical access to the box install a Trojan and remotely control the box later ??.
Take care.
I don't know about you, but after an attemptd DoS attack, I wouldn't be DCing with people while chatting, which is pretty mucht he only way to get someone's IP with IM's. Other then that and getting me to email you there really is no easy way to get the new IP unless you wanna guess the hundreds of different possibilities.Quote:
Or they can simply look at your IP via any of the myriad of services (who doesn't use IM's nowadays?) most users user, and eliminate the guessing.
Tiger Shark, I agree with you, but I don't connect to my computer from a remote location often ;).
No, it isn't, several of the IM systems out there have IP lookups enabled. MSN Messenger REQUIRES UPnP enabled specifically for reporting this to the MSN server when doing voice chat and similar things. Even for regular IM use you can find it. IIRC there were several tools for ICQ, MSN, and YIM that allowed you to just punch in someone's account ID and then get their IP from the server.Quote:
Originally posted here by The Duck
I don't know about you, but after an attemptd DoS attack, I wouldn't be DCing with people while chatting, which is pretty mucht he only way to get someone's IP with IM's.
That point aside, what you or I may do is irrelevant, it's important that people understand that it's a possible way for people to get your IP.
It doesnot matter whether u have a static or dynamic IP for ur box, there are the applications which make a virus resident on ur drive, each time u connect to net that application provides host service to any other computer called attacker on the net. If such a service is sitting inside ur box,i t doesn't matter whether u r using static or dynamic IP addressing. Both are safe and vulnerable in the same way.
If u have a firewall on ur box. then ur computer is just as safe as anything else. For the problem that ur incoming traffic is not visible through the net, check for the setting of ur router. If u can access the web then ur computer is on the net.