Preventing a resolved internal IP address when using PC testing sites

Preventing a resolved internal IP address when using PC testing sites

When I go to various PC test sites my internal IP address is always resolved. Is there a way to prevent this? I'm running Win XP Home (SP2). I use McAfee VirusScan and Firewall. CounterSpy is my anti-spyware program. My ISP is Verizon DSL. My PC is not missing any patches. Should I be concerned about this or am I being too paranoid?

    Requires Free Membership to View

    Login

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by IT professionals today working with desktop management and security technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseDesktop.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseDesktop.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

It kind of depends on the test site you are using and your home network configuration. If you are using an external hardware based firewall such as the Cisco PIX 501 or any of the SOHO firewall products, your internal address space (typically 192.168.1.x) should be undetectable from an outside source. If the address is being detected, it could be a sign that NAT is not properly configured on your network, and that is a legitimate concern.

If you are not using an external hardware based firewall and the IP address that is being reported is the address that Verizon is assigning you, that isn't of concern, since that address must be known on the Internet to allow for communications. I would recommend that, in addition to your current configuration, you also implement a dedicated hardware based firewall for the additional security and anonymity of your internal address space.

In regards to the test sites, the most popular site out there, www.grc.com can detect your internal IP address if you have installed a client "shim" from them. This essentially circumvents the NAT masking that occurs, allowing GRC to report on your actual internal address. If you have installed this client component, then there is nothing to worry about, since it is working as it should.

This was first published in June 2005

Back to top