<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Xster.net &#187; ip</title>
	<atom:link href="http://tech.xster.net/tag/ip/feed/" rel="self" type="application/rss+xml" />
	<link>http://tech.xster.net</link>
	<description>Never relearn twice</description>
	<lastBuildDate>Fri, 20 Jan 2012 21:11:29 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Stop Transferring All Internet Traffic Through Windows VPN</title>
		<link>http://tech.xster.net/tips/stop-transferring-all-internet-traffic-through-windows-vpn/</link>
		<comments>http://tech.xster.net/tips/stop-transferring-all-internet-traffic-through-windows-vpn/#comments</comments>
		<pubDate>Wed, 21 Jul 2010 18:52:14 +0000</pubDate>
		<dc:creator>xiao</dc:creator>
				<category><![CDATA[Tips]]></category>
		<category><![CDATA[Gateway]]></category>
		<category><![CDATA[ip]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[TCP]]></category>
		<category><![CDATA[VPN]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://tech.xster.net/?p=257</guid>
		<description><![CDATA[By default, when you connect to VPN in Windows, it will put all your Internet traffic through the VPN. This can be annoying if you just want to VPN in to get access to some files on the network. This can be especially annoying if your VPN server is slow and now all your Internet [...]]]></description>
			<content:encoded><![CDATA[<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>By default, when you connect to VPN in Windows, it will put all your Internet traffic through the VPN. This can be annoying if you just want to VPN in to get access to some files on the network. This can be especially annoying if your VPN server is slow and now all your Internet access speed is slow.<span id="more-257"></span></p>
<p>To use VPN for domain network access only</p>
<ol>
<li>Right-click your VPN connection and choose properties.</li>
<li>Go to Networking tab and open your TCP/IPv4 item</li>
<li>Click on Advanced&#8230;</li>
<li>Uncheck &#8220;Use default gateway on remote network&#8221; and click OK</li>
</ol>
<p>Now, only relevant traffic goes through VPN</p>
<p style="text-align: center;"><a href="http://tech.xster.net/wp-content/uploads/2010/07/21-07-2010-2-48-46-PM1.png"><img class="aligncenter size-full wp-image-259" title="VPN Settings" src="http://tech.xster.net/wp-content/uploads/2010/07/21-07-2010-2-48-46-PM1.png" alt="" width="723" height="293" /></a></p>
<div class="shr-publisher-257"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Ftech.xster.net%2Ftips%2Fstop-transferring-all-internet-traffic-through-windows-vpn%2F' data-shr_title='Stop+Transferring+All+Internet+Traffic+Through+Windows+VPN'></a><a class='shareaholic-tweetbutton' data-shr_count='none' data-shr_href='http%3A%2F%2Ftech.xster.net%2Ftips%2Fstop-transferring-all-internet-traffic-through-windows-vpn%2F' data-shr_title='Stop+Transferring+All+Internet+Traffic+Through+Windows+VPN'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->]]></content:encoded>
			<wfw:commentRss>http://tech.xster.net/tips/stop-transferring-all-internet-traffic-through-windows-vpn/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Suppress Scapy IPv6 Warning</title>
		<link>http://tech.xster.net/tips/suppress-scapy-ipv6-warning/</link>
		<comments>http://tech.xster.net/tips/suppress-scapy-ipv6-warning/#comments</comments>
		<pubDate>Mon, 05 Apr 2010 22:45:13 +0000</pubDate>
		<dc:creator>xiao</dc:creator>
				<category><![CDATA[Tips]]></category>
		<category><![CDATA[ip]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[packet]]></category>
		<category><![CDATA[Python]]></category>
		<category><![CDATA[Scapy]]></category>
		<category><![CDATA[sniffer]]></category>
		<category><![CDATA[TCP]]></category>

		<guid isPermaLink="false">http://tech.xster.net/?p=207</guid>
		<description><![CDATA[When you run Scapy without a default IPv6 routing gateway, Scapy will display this annoying warning: WARNING: No route found for IPv6 destination :: (no default route?) You definitely don&#8217;t want to see it every time you run the script you built with Scapy. To get rid of it, simply add import logging logging.getLogger&#40;&#34;scapy.runtime&#34;&#41;.setLevel&#40;logging.ERROR&#41; before [...]]]></description>
			<content:encoded><![CDATA[<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>When you run <a href="http://www.secdev.org/projects/scapy/" target="_blank">Scapy</a> without a default IPv6 routing gateway, Scapy will display this annoying warning:</p>
<pre>WARNING: No route found for IPv6 destination :: (no default route?)</pre>
<p>You definitely don&#8217;t want to see it every time you run the script you built with Scapy. To get rid of it, simply add</p>

<div class="wp_syntax"><div class="code"><pre class="python" style="font-family:monospace;"><span style="color: #ff7700;font-weight:bold;">import</span> <span style="color: #dc143c;">logging</span>
<span style="color: #dc143c;">logging</span>.<span style="color: black;">getLogger</span><span style="color: black;">&#40;</span><span style="color: #483d8b;">&quot;scapy.runtime&quot;</span><span style="color: black;">&#41;</span>.<span style="color: black;">setLevel</span><span style="color: black;">&#40;</span><span style="color: #dc143c;">logging</span>.<span style="color: black;">ERROR</span><span style="color: black;">&#41;</span></pre></div></div>

<p>before importing Scapy to suppress all messages below error messages</p>
<div class="shr-publisher-207"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Ftech.xster.net%2Ftips%2Fsuppress-scapy-ipv6-warning%2F' data-shr_title='Suppress+Scapy+IPv6+Warning'></a><a class='shareaholic-tweetbutton' data-shr_count='none' data-shr_href='http%3A%2F%2Ftech.xster.net%2Ftips%2Fsuppress-scapy-ipv6-warning%2F' data-shr_title='Suppress+Scapy+IPv6+Warning'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->]]></content:encoded>
			<wfw:commentRss>http://tech.xster.net/tips/suppress-scapy-ipv6-warning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Arpspoof, Tcpkill, Tcpnice Tutorial</title>
		<link>http://tech.xster.net/tips/arpspoof-tcpkill-tcpnice-tutorial/</link>
		<comments>http://tech.xster.net/tips/arpspoof-tcpkill-tcpnice-tutorial/#comments</comments>
		<pubDate>Wed, 09 Dec 2009 04:56:29 +0000</pubDate>
		<dc:creator>xiao</dc:creator>
				<category><![CDATA[Tips]]></category>
		<category><![CDATA[arp]]></category>
		<category><![CDATA[arpspoof]]></category>
		<category><![CDATA[bsd]]></category>
		<category><![CDATA[forwarding]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[ip]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[Mac]]></category>
		<category><![CDATA[spoofing]]></category>
		<category><![CDATA[tcpkill]]></category>
		<category><![CDATA[tcpnice]]></category>

		<guid isPermaLink="false">http://tech.xster.net/?p=175</guid>
		<description><![CDATA[Notes to self because I never remember To arpspoof, turn on IP forwarding: echo 1 &#62; /proc/sys/net/ipv4/ip_forward with Linux (might need su) or more permanently, net.ipv4.ip_forward = 1 in /etc/sysctl.conf In BSD/Mac OS X, sysctl -w net.inet.ip.forwarding=1 or net.inet.ip.forwarding = 1 in /etc/sysctl.conf Alternatively, you can also use fragrouter to forward packets with fragrouter -B1 [...]]]></description>
			<content:encoded><![CDATA[<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>Notes to self because I never remember</p>
<p>To arpspoof, turn on IP forwarding:</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #7a0874; font-weight: bold;">echo</span> <span style="color: #000000;">1</span> <span style="color: #000000; font-weight: bold;">&gt;</span> <span style="color: #000000; font-weight: bold;">/</span>proc<span style="color: #000000; font-weight: bold;">/</span>sys<span style="color: #000000; font-weight: bold;">/</span>net<span style="color: #000000; font-weight: bold;">/</span>ipv4<span style="color: #000000; font-weight: bold;">/</span>ip_forward</pre></div></div>

<p>with Linux (might need su) or more permanently,</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">net.ipv4.ip_forward = <span style="color: #000000;">1</span></pre></div></div>

<p>in /etc/sysctl.conf<br />
<span id="more-175"></span><br />
In BSD/Mac OS X,</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">sysctl <span style="color: #660033;">-w</span> net.inet.ip.forwarding=<span style="color: #000000;">1</span></pre></div></div>

<p>or</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">net.inet.ip.forwarding = <span style="color: #000000;">1</span></pre></div></div>

<p>in /etc/sysctl.conf</p>
<p>Alternatively, you can also use fragrouter to forward packets with</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">fragrouter <span style="color: #660033;">-B1</span></pre></div></div>

<p>Then to arpspoof</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">arpspoof <span style="color: #660033;">-t</span> <span style="color: #7a0874; font-weight: bold;">&#91;</span>victim ip<span style="color: #7a0874; font-weight: bold;">&#93;</span> <span style="color: #7a0874; font-weight: bold;">&#91;</span>gateway ip<span style="color: #7a0874; font-weight: bold;">&#93;</span></pre></div></div>


<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">arpspoof <span style="color: #660033;">-t</span> <span style="color: #7a0874; font-weight: bold;">&#91;</span>gateway ip<span style="color: #7a0874; font-weight: bold;">&#93;</span> <span style="color: #7a0874; font-weight: bold;">&#91;</span>victim ip<span style="color: #7a0874; font-weight: bold;">&#93;</span></pre></div></div>

<p>Optionally, add</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;"><span style="color: #000000; font-weight: bold;">&amp;</span> <span style="color: #000000; font-weight: bold;">&gt;</span> <span style="color: #000000; font-weight: bold;">/</span>dev<span style="color: #000000; font-weight: bold;">/</span>null</pre></div></div>

<p>to get rid of output. Trust me, there&#8217;s nothing interesting.</p>
<p>To block sites/ports:</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">tcpkill <span style="color: #660033;">-9</span> host www.facebook.com or port <span style="color: #000000;">5432</span></pre></div></div>

<p>To slow down traffic:</p>

<div class="wp_syntax"><div class="code"><pre class="bash" style="font-family:monospace;">tcpnice net 10.0.0.2 or port <span style="color: #000000;">5432</span></pre></div></div>

<p>Filter expressions are <a href="http://linux.die.net/man/8/tcpdump">here</a></p>
<p>The easiest way to detect this spoofing is to ping something outside your gateway and look for redirects</p>
<div class="shr-publisher-175"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Ftech.xster.net%2Ftips%2Farpspoof-tcpkill-tcpnice-tutorial%2F' data-shr_title='Arpspoof%2C+Tcpkill%2C+Tcpnice+Tutorial'></a><a class='shareaholic-tweetbutton' data-shr_count='none' data-shr_href='http%3A%2F%2Ftech.xster.net%2Ftips%2Farpspoof-tcpkill-tcpnice-tutorial%2F' data-shr_title='Arpspoof%2C+Tcpkill%2C+Tcpnice+Tutorial'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->]]></content:encoded>
			<wfw:commentRss>http://tech.xster.net/tips/arpspoof-tcpkill-tcpnice-tutorial/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

