Page 1 of 1

Any way to block internal IP (router)

Posted: Sat Jul 28, 2012 3:23 pm
by TXGuy9999
My former firewall had a "vault" feature to allow me to keep certain information (credit card numbers, etc) from being sent without my express permission. I had my internal IP (router 192.168.xxx.xxx) on that list. The information in the "vault" was encryted and not readable by anyone accessing the firewall "vault" page and presumably by any outsider trying to hack that firewall "vault" information. With that in place in my old firewall, when visiting http://www.auditmypc.com/digital-footprint.asp and allowing/temporarily allowing that site in NoScript, the internal IP could not be seen by that site.

My new firewall does not have that "vault" feature. I am only concerned about website tracking, though I know that many others might have the same internal IP and tracking a specific user on a website would be difficult.

Is there a method within NoScript to keep the internal IP from being exposed when allowing a site in NoScript that might "snoop" for that information?
  • If so, what would be exact steps that I need to take?
  • If not, could such an option be considered in a future NoScript version?
Thanks

Re: Any way to block internal IP (router)

Posted: Sun Jul 29, 2012 10:07 am
by dhouwn
Simply don't allow Java applets (or similar). IMHO, it's good to have "Forbid Java" and "Apply these restrictions to whitelisted sites too" checked in the tab "Embeddings" tab in NoScript's settings window.

Re: Any way to block internal IP (router)

Posted: Sun Jul 29, 2012 11:39 am
by therube
192.168.xxx.xxx is non-routable.

Where does http://www.auditmypc.com/ see that (regardless of JavaScript or any plugins)?

Most anyone (as I think of "anyone") behind a router is going to have an 192. or 10. IP, so one does not necessarily need to "know" your LAN IP, because if they could access it, they could simply scan a range to find it.

Re: Any way to block internal IP (router)

Posted: Sun Jul 29, 2012 3:03 pm
by TXGuy9999
dhouwn
I already have those settings in place. The problem occurs when Java must be allowed for a page to function/display properly.

therube
  • It is seen on auditmypc's "Digital Footprint" page, below GPS information when auditmypc is temporarily allowed in NoScript. With the "vault" feature in my previous firewall, that information was not detectable by auditmypc's "Digital Footprint" page when auditmypc was temporarily allowed in NoScript.
  • As I said in my original question/post "I am only concerned about website tracking, though I know that many others might have the same internal IP and tracking a specific user on a website would be difficult" (using an internal IP) and I am fully aware that my internal IP is not accessible to outsiders, my concern is just the tracking consideration by websites.