I’m running a trial of Avast Pro. Interestingly if I run the test here: http://www.proxyblind.org/javaipp.shtml with NOD32 installed, my LAN side machine IP address is revealed. If I do the same thing with Avast Pro installed all it reveals is 127.0.0.1 - which of course is useless to anyone!!
So, is it the script blocking that’s doing this? I’d really like to know how Avast does this, as I’m not using a Proxy, no additional firewall other than my router which allows all outgoing traffic and no other security tools that could be responsible. If it’s not script blocking that’s handling this, presumably the free version will return the same result…??
As a general point, I’ve been a NOD32 user, a Kaspersky Beta tester, and I’ve tried (without success) to test drive Avira. And…I’m back here, trialling an AV product that:
Hasn’t caused me a moment’s grief so far
Doesn’t slow my machine or my surfing
Has saved my *ss already by catching a dodgy download using uTorrent.
Not knowing much (read zero) about NOD32 I don’t know if it has a function like the web shield which routes all http port 80 traffic through its localhost proxy on port 12080 (127.0.0.1:12080), if not then the results are likely to be different.
I checked the site and ran the test and confirm that it gives 127.0.0.1 as my IP see image1, however I feel this is a limitation of the Java IP test. If you look at your posts in the forums it will show your IP address on your posts (no one else can see it), so if a forum web site can reveal your IP address (see image2 of one of my posts). This is a really simple task I would say as you can get images you can use as signatures that reveal the IP address, browser, etc.)
David, that is the public IP associated with my ISP. I’m talking about my LAN side IP as specified in my TCP/IP settings on this specific machine. The IP address on my posts in this forum are NOT that IP address!
Edit: If you can be bothered, remove Avast and run the test again with that site, and you’ll see your machine IP pop up before your very eyes - not nice. Install NOD32 and you get the same. Re-install Avast…127.0.0.1
But does NOD use a localhost redirect for http port 80 traffic as that is the only thing I can think of which may be different.
So by your comment, not nice, I take it that you don’t like it to be revealed ?
Edit: If you can be bothered, remove Avast and run the test again with that site, and you'll see your machine IP pop up before your very eyes - not nice.
So perhaps the localhost is providing some masking as the connection is made through the localhost proxy, I don’t know the technicalities of it, only a humble avast user ;D
A very good point - maybe I’ve been ‘suckered’ by the security tool advertising. There are opinions around like the one below, but otherwise this one seems to be up for debate…thanks for the sanity check though Tech…!
“I had just done the same test you’ve done and discovered my internal IP address was being shown. One of the reasons you do not want your internet IP addresses being show is because it gives hackers that much more information to your internal structure. The more information they have the easier it is for them to hack in or social engineer their way in. I’m currently seeing what patch I have to apply to stop this, as not allowing java isn’t a option. Also in case anyone is interested I found a great way to stop at least 50% of the SPAM at my work by blocking the rest of the worlds IP addresses at the firewall. This works only if you do work with US companies and visit only US web sites.”
One of the reasons you do not want your internet IP addresses being show is because it gives hackers that much more information to your internal structure.
I can`t believe such a paranoid... They don`t want to be hacked because of this... I can`t believe.
There are tons of exploits and holes into operational system, browser, applications, etc. and someone is worried about the internal IP... well, these are the days we live...
