Is it bad to disclose external IP to strangers?

6

1

I was looking some examples on how to connect mysql/tomcat from a remote system. (ex1, ex2, ex3)

I have just provided some links though there are many available. In all the examples I have seen nobody is disclosing his external IP. Some write 'x.x.x.x', some write 'externalIP' and some use other ways. I am just curious to know why people do not disclose their external IP, but do they show their local IP like 192.168.1.22. Can people hack into a system by knowing the external IP or are there any other reasons?

SpringLearner

Posted 2014-02-06T06:33:19.130

Reputation: 441

1It's same as writing your Home address in public place without your name. – codeSetter – 2014-02-06T13:09:47.827

Answers

3

Giving your real IP address is not really recommended but it's not usually harmful (after all, every time you go to a website, its owner can see your address, and thankfully most of them have better things to do than attacking you).

Now, posting it in a message where you also explain you just turned off both your firewall and your antivirus will really get some attention from the bad persons.

Regarding the fact that you even consider turning those off, I would say the right answer for you is do not post your IP address anywhere!

Now, about your comments to previous answers: you don't have to turn off your firewall to allow connection to one server running on your pc. Just configure it to open the port you need.

Also I'm kind of sure disabling your antivirus will not help at all. Don't do that.

If as I assume you have issues to connect to a server running on your pc from outside your local network, the source of the problem is usually one of those two:

  • you have a router, and you need to configure port forwarding on your router (not on your pc)
  • your server software is configure to only accept local connections (connections originating from the same pc it is running on), and you need to change this setting (Google this since it depends of the actual server you're trying to configure)

Good luck!

LeFauve

Posted 2014-02-06T06:33:19.130

Reputation: 230

Thanks for the answer,+1.I have done the port forwarding but still I am not able to access from internet.I saw some questions in some forums and they said to turn off windows firewall and so i turned it off – SpringLearner – 2014-02-06T07:49:03.423

@JqueryLearner your next move is to check that your server software is listening on the actual network card, and not only on the loopback device. You will have to look on your server documentation for this. Also while you're into the documentation find how to activate debug log. That may give you some useful information if it still doesn't work – LeFauve – 2014-02-06T08:09:40.213

Having just read your comment in another answer about your server accepting connexions from local network, my previous comment won't help (if you can actually connect from another computer, your server is already listening on the actual network card). You may instead check your port forwarding again. – LeFauve – 2014-02-06T08:38:04.727

See tomcat server is installed in 192.168.1.101 so to access from another system I just type http://192.168.1.101:8080/aap but for accessing from internet when I type http://externalIP:8080/aap then its working.I have done the port forwarding

– SpringLearner – 2014-02-06T09:06:13.067

Ok... So if it work from both your local network and an external computer, what is your issue again? – LeFauve – 2014-02-07T06:16:45.033

hey sorry It was not working.I forgot to add the word not – SpringLearner – 2014-02-07T06:18:12.737

Ok... I still think something is wrong with your port forwarding. Can you look at server log to see if a connection is attempted? – LeFauve – 2014-02-07T08:00:57.443

Yes sure,i will check and let you know.Well where can I find the log? – SpringLearner – 2014-02-07T08:02:37.973

14

There is a potential that if you post your public IP that you will draw more attention to it, then what it would normally receive by simply being on the Internet. Ideally your firewall and host security should already be strong enough to withstand and attacks. There is nothing inherently secret about an IP address. They have to be known for communication to happen.

There is a network reserved explicitly for documentation and sharing 192.0.2.0/24. So feel free to use that, or one of the other RFC 5735 ranges that are reserved for internal networks or documentation.

Zoredache

Posted 2014-02-06T06:33:19.130

Reputation: 18 453

My problem was connecting to mysql and tomcat from a remote system. And I wanted to post the codes for it.So If i have my windows firewall turned off and antivirus also turned off then will it create problem If i include externalIp in my codes – SpringLearner – 2014-02-06T06:57:45.137

3@JqueryLearner Put it this way, would you give a stranger your home address (your external publicly accessible IP address), leave your door wide open (Firewall set to off), and put the guard dog into the kennel (turn off anti virus)? Mind you, having anti virus alone may not help as anti virus often can't detect new viruses until they found a sample, and create detection method for the virus. – Darius – 2014-02-06T07:13:56.217

@Darius Thanks for your comment.I have done an app using jsp and its hosted in my local system so users within my LAN can only access it.I read some where that using port forwarding any one in the world can access my app and so I have done port forwarding also but still I am not able to access from internet.So I thought of posting question reagrding the problem.So before posting the question I wanted to know is it bad to post externalIP or not.Hope you understood why I turned off windows firewall.If you know how to make local app to be available to internet then please share your knowledge – SpringLearner – 2014-02-06T07:54:23.163

1

Check out https://pagekite.net/, they offer a proxy service that allows you to expose a local web server on a public address. Free trial, and it's free software, so you could put the public end on a VPS or on a friend's server that has a public IP.

– clacke – 2014-02-06T10:04:27.070

1@JqueryLearner: Do not turn off your firewall and antivirus. – Marcks Thomas – 2014-02-06T12:46:22.643

@Darius Mind you, JqueryLeaner migth be from Canada, in which case the behaviour you describe might make perfect sense so that the stranger can stop by and check that everything is alright. ;-) – Frerich Raabe – 2014-02-06T13:44:49.907

@JqueryLearner Leaving firewall and antivirus turned off is like leaving all your doors and windows open all the time. Inviting trouble even if you don't publish your address. There are bots portscanning ip addresses on the internet for vulnerabilities all the time. Your system will be found and attacked. – Randy Orrison – 2014-02-11T06:58:32.623

@RandyOrrison Thanks for sharing your knowledge.My requirement is to make my localhost server available to internet.And for this I need port forwarding but I dont know why its not working.I saw some where to block windows firewall and check.So i did that – SpringLearner – 2014-02-11T07:18:29.180

1

yes and no, the Problem is not hacking (there for they have a firewall which should not let Bad-Things happen) but you can do so called DDOS Attack against the Server/Firewall over the public IP.

Also its not usefull if you write your public IP (cause many DAU users just copy past code, and then you have a problem cause their System would have the same ip as yours which is really bad cause a public ip must be unique.

internal ip is no problem they can just use the same cause its behind the router (the problem with not beeing unique is stuck on their own network so no problem for you)

i hope this helps. sry my bad english - was in a hurry and my motherlanguage is german not english.

konqui

Posted 2014-02-06T06:33:19.130

Reputation: 504

Thanks for answering,+1.So do you think If I provide externalIP to users and turn off windows firewall off and antivirus also will create problem – SpringLearner – 2014-02-06T06:54:24.393