Pau Lo
asked on
web facing infrastructure
If you ping a corporate website from the inside (behind the firewall in the same network where the web server is hosted), will it give you the internal IP of the server hosting the website, or the external IP of the server hosting the website?
Also, how can you identify all corporate “web facing” servers from the outside, if all you have is the corporate website? Do companies buy public facing IP’s in blocks? So if you have one IP you can try similar to see if that’s also a corporately owned server? Or is there a more sophisticated way of doing this?
What kinf of infrastructure aside from “web servers” would typically be public facing in a corporate DMZ, and pingable and/or viewable from the internet?
Also, how can you identify all corporate “web facing” servers from the outside, if all you have is the corporate website? Do companies buy public facing IP’s in blocks? So if you have one IP you can try similar to see if that’s also a corporately owned server? Or is there a more sophisticated way of doing this?
What kinf of infrastructure aside from “web servers” would typically be public facing in a corporate DMZ, and pingable and/or viewable from the internet?
second question
it depends on the setup of the website and the volume of traffic as sometimes websites are split to different servers depending on volume of traffic
it depends on the setup of the website and the volume of traffic as sometimes websites are split to different servers depending on volume of traffic
ASKER
Im not overly familiar with tracert or how the output woudl tell me if its an internal IP or an external IP, how can you tell just from looking at the IP?
I just ran tracert www.corporatesite.com (made up URL) and it lists 5 entries, the last (number 5) being the server hostname (with IP). If it makes any difference the first chunk of the IP (you can see I am not a network person) is 10. for the first 4 entries in the tracert output, whereas the 5th entry begins with 192.xxx.xxx.xxx
I just ran tracert www.corporatesite.com (made up URL) and it lists 5 entries, the last (number 5) being the server hostname (with IP). If it makes any difference the first chunk of the IP (you can see I am not a network person) is 10. for the first 4 entries in the tracert output, whereas the 5th entry begins with 192.xxx.xxx.xxx
ASKER
re 2nd question, I am 99% sure it isnt a very popular website and will have limited traffic.
run a ipconfig /all on your pc and see what are the internal IP addresses your server runs and then see how they compare with the tracert.
192.xxx.xxx.xxx is an internal ip 90% of the time.
192.xxx.xxx.xxx is an internal ip 90% of the time.
ASKER
>>192.xxx.xxx.xxx is an internal ip 90% of the time.
Can you tell that just from the "192"? What does the "192" represent? And what kind of number would be assigned to a public facing server? Can you get the servers public facing Ip from the inside using any particular command? Running IP config says my IP address begins with 10.xxx.xxx.xx, theres some other weird stuff like IP assigned to the "default gateway", I wonder if that was one of the entries on the tracert.
What would the 5 results resolved by the tracert represent? I know its the path the traffic took, but non of the entries in the output show my PC IP? The first one is the default gateway? What is a default gateway? In laymans terms?
Can you tell that just from the "192"? What does the "192" represent? And what kind of number would be assigned to a public facing server? Can you get the servers public facing Ip from the inside using any particular command? Running IP config says my IP address begins with 10.xxx.xxx.xx, theres some other weird stuff like IP assigned to the "default gateway", I wonder if that was one of the entries on the tracert.
What would the 5 results resolved by the tracert represent? I know its the path the traffic took, but non of the entries in the output show my PC IP? The first one is the default gateway? What is a default gateway? In laymans terms?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
the five results from tracert represent the route that your pc takes to the website. see screenshot of a tracert from my pc to www.google.co.uk
the first one is my gateway (192.168.1.254)
then the rest of them are other servers till eventually reaches 74.125.230.113 which is google.
as you can see there are two 10.1.x.xx ips which are external servers
i hope that helps
tracert.jpg
the first one is my gateway (192.168.1.254)
then the rest of them are other servers till eventually reaches 74.125.230.113 which is google.
as you can see there are two 10.1.x.xx ips which are external servers
i hope that helps
tracert.jpg
ASKER
Thanks, so when your ISP gives your org say 20 external IP's, does it give them in blocks, so if you find the external IP for the corporate website is w, can you try x, y and z and likely identify other public servers for the org? Or is it not that simple?
it is possible but not a certainty
first question do a tracert and you can see for your self as it depends on what setup you have