next »

[eagle]

hi;
i use command "tracert www.google.com" and i dont want to see "pfsense.local [192.168.1.1]" .it is my lan ip.if you help me im glad.

[Perry]

Hmm it's always the first hop else you'll have to traceroute from pfsense.

[eagle]

Hmm it's always the first hop else you'll have to traceroute from pfsense.

from pfsense its ok. but windows cmd screen i use tracert command i dont want to see pfsense.local ip adress. i want to hide lan ip adress and how can i do at pfsense  

[Cry Havok]

The only way to do it is with a transparent firewall.  This has issues - do search the forum.

[AtomicPlayboy]

from pfsense its ok. but windows cmd screen i use tracert command i dont want to see pfsense.local ip adress. i want to hide lan ip adress and how can i do at pfsense  

Any host that has gotten an address via dhcp (or is otherwise properly configured to get to the Internet) will have a default route and thus know the lan ip address of your pfSense box.

What problem exactly are you trying to solve here?

[eagle]

from pfsense its ok. but windows cmd screen i use tracert command i dont want to see pfsense.local ip adress. i want to hide lan ip adress and how can i do at pfsense  

Any host that has gotten an address via dhcp (or is otherwise properly configured to get to the Internet) will have a default route and thus know the lan ip address of your pfSense box.

What problem exactly are you trying to solve here?


in my system user use tracert command at windows cmd example "tracert www.google.com"  they see "pfsense.local[192.168.1.1].but i want to hide this ip adress.in other words user will not know firewall(pfsense) at system.i hope i can explain it

[fredde]

wut?

[GruensFroeschli]

eagle: As Cry Havok said, this is only possible with a "transparent firewall" setup.
Searc the forum and the docs for info on how to set that up: http://doc.pfsense.org/index.php/Tutorials

As long as pfSense itself actually routes traffic it's not possible what you're trying to achieve.


But what i'm thinking: why are you trying to hide the pfSense IP?
I mean as it is right now your users can type "ipconfig" on the cmd and they will see the default gateway which is the pfSense IP, so no point in what you're proposing.

[cmb]

Oh, I think what the original poster is saying is he doesn't want the name of the firewall to show up in the traceroute? 

That comes from the reverse DNS, on the System -> General page you have it set to pfsense.local so when you traceroute and it does a reverse DNS lookup that's what you get. You can change the name thee to have it show up as something else but there really isn't any point in that at all, you should be able to broadcast to the world what firewall you're using without any security risk. Especially when that's just on your internal network.