Virtual/invisible Internet gateway?

Hi Everyone,

Is it possible to setup an invisible Internet gateway? Normally if you do
"ipconfig" on any PC on the network, you can find out the gateway of the
network easily. If you are using a firewall, local user can find out the
gateway address and try to crack the firewall by testing different password.
How can we setup a gateway, it is virtual there, but it is not.

I was on a network that the actual firewall address is 192.168.1.254, but
when you do a "ipconfig", the gateway address shows 192.168.1.40, but you
can't ping the ".40" address at all. How can I set it up like this?

Thank you in advance!!

On the gateway machine, have "Allow incoming echo request" untick.

To do this, go to the Windows Firewall -> Advanced > Your connection ->
Settings > ICMP.

(Assuming that your gateway is a WinXP SP2/Win2k3 Server SP1 machine).

Hope this helps.

--
Jabez Gan [MVP]
Microsoft MVP: Windows Server
http://www.blizhosting.com
MSBLOG: http://msblog.resdev.net


"Roy T" <(E-Mail Removed)> wrote in message
news:210D96B0-E9E0-4DE6-9F7B-(E-Mail Removed)...
> Hi Everyone,
>
> Is it possible to setup an invisible Internet gateway? Normally if you do
> "ipconfig" on any PC on the network, you can find out the gateway of the
> network easily. If you are using a firewall, local user can find out the
> gateway address and try to crack the firewall by testing different
> password.
> How can we setup a gateway, it is virtual there, but it is not.
>
> I was on a network that the actual firewall address is 192.168.1.254, but
> when you do a "ipconfig", the gateway address shows 192.168.1.40, but you
> can't ping the ".40" address at all. How can I set it up like this?
>
> Thank you in advance!!

HI

Thank you Jabez for your reply, but I don't think this is the case, since I
don't see this machine on the network at all, I can't terminal service to it
and I don't think we got any Linux box on the network. Actually, I am new to
our Network, i am just trying to understand it without asking too many
questions to my senior. I got access to all the servers, but I don't think
any of our server has this address assigned to it.

Any other thought?



"Jabez Gan [MVP]" wrote:

> On the gateway machine, have "Allow incoming echo request" untick.
>
> To do this, go to the Windows Firewall -> Advanced > Your connection ->
> Settings > ICMP.
>
> (Assuming that your gateway is a WinXP SP2/Win2k3 Server SP1 machine).
>
> Hope this helps.
>
> --
> Jabez Gan [MVP]
> Microsoft MVP: Windows Server
> http://www.blizhosting.com
> MSBLOG: http://msblog.resdev.net
>
>
> "Roy T" <(E-Mail Removed)> wrote in message
> news:210D96B0-E9E0-4DE6-9F7B-(E-Mail Removed)...
> > Hi Everyone,
> >
> > Is it possible to setup an invisible Internet gateway? Normally if you do
> > "ipconfig" on any PC on the network, you can find out the gateway of the
> > network easily. If you are using a firewall, local user can find out the
> > gateway address and try to crack the firewall by testing different
> > password.
> > How can we setup a gateway, it is virtual there, but it is not.
> >
> > I was on a network that the actual firewall address is 192.168.1.254, but
> > when you do a "ipconfig", the gateway address shows 192.168.1.40, but you
> > can't ping the ".40" address at all. How can I set it up like this?
> >
> > Thank you in advance!!
>
>
>

Hi,

Sorry, some clarification, actually I can ping the IP address, but I got no
result, when do a nslookup IP_address on the Domain Controller, and I can't
terminal service to it.

Sorry about the confusion.



"Roy T" wrote:

> HI
>
> Thank you Jabez for your reply, but I don't think this is the case, since I
> don't see this machine on the network at all, I can't terminal service to it
> and I don't think we got any Linux box on the network. Actually, I am new to
> our Network, i am just trying to understand it without asking too many
> questions to my senior. I got access to all the servers, but I don't think
> any of our server has this address assigned to it.
>
> Any other thought?
>
>
>
> "Jabez Gan [MVP]" wrote:
>
> > On the gateway machine, have "Allow incoming echo request" untick.
> >
> > To do this, go to the Windows Firewall -> Advanced > Your connection ->
> > Settings > ICMP.
> >
> > (Assuming that your gateway is a WinXP SP2/Win2k3 Server SP1 machine).
> >
> > Hope this helps.
> >
> > --
> > Jabez Gan [MVP]
> > Microsoft MVP: Windows Server
> > http://www.blizhosting.com
> > MSBLOG: http://msblog.resdev.net
> >
> >
> > "Roy T" <(E-Mail Removed)> wrote in message
> > news:210D96B0-E9E0-4DE6-9F7B-(E-Mail Removed)...
> > > Hi Everyone,
> > >
> > > Is it possible to setup an invisible Internet gateway? Normally if you do
> > > "ipconfig" on any PC on the network, you can find out the gateway of the
> > > network easily. If you are using a firewall, local user can find out the
> > > gateway address and try to crack the firewall by testing different
> > > password.
> > > How can we setup a gateway, it is virtual there, but it is not.
> > >
> > > I was on a network that the actual firewall address is 192.168.1.254, but
> > > when you do a "ipconfig", the gateway address shows 192.168.1.40, but you
> > > can't ping the ".40" address at all. How can I set it up like this?
> > >
> > > Thank you in advance!!
> >
> >
> >

"Roy T" <(E-Mail Removed)> wrote in message
news:210D96B0-E9E0-4DE6-9F7B-(E-Mail Removed)...
> I was on a network that the actual firewall address is 192.168.1.254, but
> when you do a "ipconfig", the gateway address shows 192.168.1.40, but you
> can't ping the ".40" address at all. How can I set it up like this?

That is based on the topology,...you can't just "decide" that you want it
that way. The LAN you were on that was like that was due to it had multiple
subnets,...which requires the Default Gateway be the LAN Router between
those such subnets (not the Internet Sharing Device),...then the LAN
Router's Default Gateway would then be the Internet Sharing Device. So the
Clients only see the IP# of the LAN Router and never see or know what the
IP# is for the Internet Sharing Device.

In a single subnet LAN this cannot be done.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------