whats going on with my IP address

hobbit72

Member
Joined
Sep 11, 2003
Messages
21
I thought ADSL users had an external ip address of 165.165.*.*
Why is mine now 198.54.202.11????
Overnet connection tests fail everytime now.

Tracert to the 198 address goes as follows:
1. 192.168.10.200 << local machine
2. 165.165.128.1
3. 196.43.10.181
4. 196.43.11.191
5. 198.54.202.11
Does this mean anything?
Check your ip on http://www.whatismyip.com and report back please

TIA
Gary
 

BTTB

Executive Member
Joined
Feb 6, 2004
Messages
8,195
Mine is 198.54.202.2

First time I have noticed a 198 as part of my IP.
What ISP? Im with MWeb.

<b><hr noshade size="1"></b><font size="2"><font color="red"><b>You can take Telkom out of the Post Office but you can't take the Post Office out of Telkom.</b></font id="red"></font id="size2">
 

podo

Well-Known Member
Joined
Apr 16, 2004
Messages
288
Don't count on whatismyip.com. Your IP <b>is</b> in the 165.165.0.0/16 subnet range. Look at the second hop on the traceroute, that confirms it immediately.

The anomaly we are seeing here is caused by Telkom's use of transparent proxy hierarchies to try to save on bandwidth. Since whatismyip.com is just a very simple web script which gets the connecting address from the web server, it's extremely unreliable.

Remember, the server will report the IP of the client connecting to it. In the case of a proxy hierarchy, the client connecting to the web server will not be the browser on your PC, but the transparent proxy highest up in the chain for traffic from your location.

The IP being reported is that of the last transparent proxy between you and the web server the script is running on. Obviously, this is not a good way to determine your IP address and should not be used at all. However, it is very handy for finding the address of the last transparent proxy your traffic is being forwarded through.

To accurately determine your IP address, simply use what ever tool is available to check the address on your local machine. Here are instructions for the most popular configurations you might find yourself on:

For Windows NT3.5, 95, 98 and Me machines:

1) Click Start
2) Click Run
3) Type winipcfg and press &lt;ENTER&gt;
4) Select the active PPPoE interface from the interface menu.

The IP address assigned to your PPPoE client will now be displayed, along with other useful information, like the default gateway and assigned DNS servers.

For Windows NT4, 2000 and XP machines:

1) Click Start
2) Click Run
3) Type cmd.exe and press &lt;ENTER&gt;
4) Type ipconfig /all and press &lt;ENTER&gt;

A lot of information will now be spat on to the screen. Use the right scroll bar to find the active PPPoE interface. You will also receive other useful information about your connection.

For most UNIX implementations:

1) Type ifconfig

Use your terminal's scrolling function to find the active ppp interface (you want the interface created by your PPPoE client.) You will also receive helpful information, including the address of the machine on the other end of the link, the link MTU and MRU and statistics on the performance of the link.

NOTE: On some UNIX implementations, you may have to be root to run ifconfig.

If your PPPoE client is on an ethernet ADSL router or some other kind of hardware routing and NAT device, you will need to connect to the device itself and figure out what the IP is. Check the manual of your device for instructions.

Incidentally, it might be interesting to see if the chain ends with different proxies for local and international traffic. If you have a web host which supports PHP4, you can create your own whatismyip.com on your web site, by putting the simple web script enclosed in the quote below in a file like whatismyip.php and connecting to http://www.yourhost.example.com/whatismyip.php

<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote">
&lt;?php

// whatismyip.php

// This is a simple script to reveal the IP address of the
// client connecting to the server.

?&gt;
&lt;HTML&gt;
&lt;HEAD&gt;&lt;TITLE&gt;IP Address Report&lt;/TITLE&gt;&lt;/HEAD&gt;
&lt;BODY&gt;
&lt;H1&gt;IP Address Report&lt;/H1&gt;
&lt;P&gt;&lt;?php print ('The IP address of the client is: ' . $_SERVER['REMOTE_ADDR']); ?&gt;&lt;/P&gt;
&lt;/BODY&gt;
&lt;/HTML&gt;
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">

Willie Viljoen
Web Developer

Adaptive Web Development
 

lost

Member
Joined
Jun 5, 2004
Messages
25
or you could add on to that script a little and detect those pesky proxy servers. [;)]

<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote">
&lt;html&gt;
&lt;head&gt;&lt;title&gt;Connection Info&lt;/title&gt;
&lt;/head&gt;
&lt;body&gt;
&lt;?php
//Proxy Detector
if(isset($HTTP_X_FORWARDED_FOR))
{
if ($HTTP_X_FORWARDED_FOR)
{
// proxy detected...

?&gt;
&lt;b&gt;Current Connection Info:&lt;/b&gt;&lt;br&gt;&lt;br&gt;

Your Actual IP Address:
&lt;i&gt;&lt;?= $HTTP_X_FORWARDED_FOR ?&gt;&lt;/i&gt;&lt;br&gt;

Your Proxy Server:
&lt;i&gt;&lt;?= $HTTP_VIA ?&gt;&lt;/i&gt;
&lt;br&gt; Your Proxy IP Address: &lt;?= $REMOTE_ADDR ?&gt;&lt;br&gt;

&lt;?
}
}
else
{
// no proxy detected
?&gt;

&lt;b&gt;Current Connection Info:&lt;/b&gt;&lt;br&gt;
&lt;br&gt;

Your IP Address:
&lt;i&gt;&lt;?= $REMOTE_ADDR ?&gt;&lt;/i&gt;&lt;br&gt;

&lt;?
}
?&gt;
&lt;/body&gt;
&lt;/html&gt;
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">

see it in action at www.nep.za.net/ip.php
 

hobbit72

Member
Joined
Sep 11, 2003
Messages
21
I use telkom ISP

Willie, how will this affect p2p clients. I am getting a firewalled status now, when I used to be open. Surely the remote client will try to connect to this proxy IP, and therefore not reach me. How does this route to my IP?
 

podo

Well-Known Member
Joined
Apr 16, 2004
Messages
288
lost,

VERY nice. [:)] I feel very embaraced that I didn't think of that first.

A less crude version of my terribly inferior script can be seen at http://apollo.laserfence.net/~will/whatismyip.php

Interestingly enough, with my script I find that Telkom's transparent proxies do not seem to act on local traffic, as the IP my script reports is the actual IP on my PPPoE interface.

By the way lost, your script surprised me at first, by listing my PPPoE IP as a proxy, until I realised that you'd managed to detect the Squid proxy on my LAN, and even the private IP address of my PC. Very nice work.

hobbit72,

This should not affect P2P clients. The transparent proxies can only act on web traffic, so the P2P network will still see your real IP address. However, it is reasonable to assume that Telkom, in their infinite wisdom, are blocking incoming connections on popular P2P ports, so as to discourage their users from sharing files with others. This would cause you to have a "firewalled" connection status.

You might try changing the port on your side to something completely arbitrary. Something between 4100 and 4900 might not be a bad idea, as many FTP clients will establish PASV mode connections from those ports, Telkom should not be blocking them. See if that fixes the problem.

Willie Viljoen
Web Developer

Adaptive Web Development
 

lost

Member
Joined
Jun 5, 2004
Messages
25
thanks podo,

Its actually just a small bit of code I usually stick on the admin index page when I build a website with content management. And it comes in handy when you got a couple people in the same company logging in and changing things, I can always tell exactly which machine a user is logging in from and what they are doing. [;)]
 

Karnaugh

Banned
Joined
Jul 23, 2003
Messages
1,575
Code:
[root@gabriel]~: host 198.54.202.2
2.202.54.198.IN-ADDR.ARPA domain name pointer ctb-cache1-vif1.saix.net

- Colin Alston
colin at alston dot za dot org

"Getting traffic shaping right is easy and can be summed up in one word: Dont." -- George Barnett
 
Top