Page 1 of 1

ABE HTTP source IP

Posted: Sat Apr 19, 2014 6:50 pm
by Jasin Natael
I recently discovered that public IP of my router had visited my web site. Investigating it lead me to ABE.

After reading about it I understand what is going on. There is still one thing I don't get.

Why source of ABE's HTTP packets is my routers public IP?
Since my router and computer are both behind same NAT and Noscipt/ABE runs on my browser shouldn't the source IP be local address of my PC?
GET / HTTP/1.1
Host: 84.251.x.x
User-Agent: Mozilla/5.0 (ABE, http://noscript.net/abe/wan)
...

Re: ABE HTTP source IP

Posted: Sat Apr 19, 2014 7:23 pm
by Giorgio Maone
Jasin Natael wrote: Why source of ABE's HTTP packets is my routers public IP?
Since my router and computer are both behind same NAT and Noscipt/ABE runs on my browser shouldn't the source IP be local address of my PC?
In facts, the log you provide as evidence doesn't even remotely suggest the source IP is your router's public one, but just that the HTTP resource being requested is the root of the website responding to your router's public IP, if any: if the request is successful, that's proof that the bug whic ABE's "WAN feature" is intended to work-around does affect your router, i.e. its administration interface is reachable on its public IP:
GET / HTTP/1.1
Host: 84.251.x.x
User-Agent: Mozilla/5.0 (ABE, http://noscript.net/abe/wan)
...

Re: ABE HTTP source IP

Posted: Sat Apr 19, 2014 8:59 pm
by Jasin Natael
Quote on my first post just showed what made me look up ABE.

Source IP of that package as shown by Wireshark:
2836 4995.879226 Source: 84.251.x.x Destinaton:192.168.112.100 HTTP 220 GET / HTTP/1.1
84.251.x.x is the public address of my router.

So I'm still confused as to how the source IP can be my public, when the package comes from private network?