[ale] IPs

[Lightner, Jeff]

The problem is you really can't tell if the IP is "coming from Georgia"
for everything.   For example my company uses AT&T as our network
provider.   They have shown us as being in Chandler AZ because that
happened to be the location of one of our sites at the time they added
us.   They've also shown us in other locations.  Until we told them to
change the record to Atlanta there was no indication that most of our
external facing services were based in Atlanta.

-----Original Message-----
From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of Rett
Addy
Sent: Sunday, September 12, 2010 3:55 PM
To: ale at ale.org
Subject: Re: [ale] IPs


  I tried to access grc.com and Trend Micro Antivirus is blocking access

and reporting it as a bad site.  Anyone have any idea why?

Date: Sat, 11 Sep 2010 22:35:54 -0400
From: Ron Frazier<atllinuxenthinfo at c3energy.com>
Subject: Re: [ale] IPs
To: Atlanta Linux Enthusiasts - Yes! We run Linux!<ale at ale.org>,
	"Atlanta Linux Enthusiasts - Yes! We run Linux!"<ale at ale.org>
Message-ID:<5.1.1.6.2.20100911223153.037145f8 at pop.1and1.com>
Content-Type: text/plain; charset="us-ascii"; format=flowed

I don't think the ip can be spoofed if a valid connection is established
since tcp/ip requires a 3 way handshake.  If the sender doesn't require
a
valid connection, then I guess the IP can be spoofed.

FYI, if I go to grc.com and start his shields up test (simulated attack
and
port scan), before I even start it, it pops up this message:

Your Internet connection's IP address is uniquely associated with the
following "machine name":

c-76-97-157-166.hsd1.ga.comcast.net

So, he not only knows I'm in GA, he knows my ISP.  Not sure how that's
done.

Ron

_______________________________________________
Ale mailing list
Ale at ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
 
Proud partner. Susan G. Komen for the Cure.
 
Please consider our environment before printing this e-mail or attachments.
----------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------