hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Help - Search - Member List - Calendar
Full Version: Zonet Zsr1104we
GovernmentSecurity.org > The Archives > Exploit Articles
qcred11
Apr 29 2004, 05:38 PM
QUOTE

Zonet ZSR1104WE

Router does not report inbound connections with their WAN ip address.  All inbound connections are posted as the routers LAN address.

This issue is a simple one.  The ZSR1104WE router with the listed firmware / hardware will not report an inbound TCP/IP connections WAN address.  We host a service that uses port 443 @ 192.168.1.2 that is forwarded through the routers NAT firewall.  Lets say an inbound connection from 24.156.189.3 establishes a socket connection to the service on port 443.  Our services IP logging tool and Windows XPPro SP1 netstat command line utility will not report the WAN address of this connection.  Instead the LAN IP address of the router will be reported as the inbound connections address.  It is analogous to NAT in reverse.  All inbound connections are masked as the router's LAN IP address.  Our service and some other tools discriminate security rights depending on whether the connection is from the WAN or LAN, this behavior makes that impossible.  The connection will behave normally.  However I speculate that it is using the MAC address to get the routing correct.  I have contacted their support to inform them of this error and their response is to not fix it as it does not break the connection.


-Jason Wachtel

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.