send fake ip address for defined ip for security - security

I need to send a fake IP address to a defined server (ip) due to the need for security and distrust in that server. Unfortunately, I have to use this server, but I do not want fake IP to be sent to all servers where I connect. I need it for windows operating system.
Does anyone know how to do this?

Related

Will queries with IP address skip DNS server?

I understand any client applications request queries with domain names will send to DNS server for domain name to IP resolution. But what if the requested queries is IP address only, does it mean the query will not send to DNS server for resolution? I'm wondering if the client applications will make the decision to save a trip to DNS server? Please advise. Thanks!!
Yes.if requested is IP address.client will direct connect to that IP.
You can test this by set wrong DNS server,the IP request still works.
IP address request only go through route.domain request will send DNS query then use answer IP to do request.

xss-attack took place in our webapp hosted in Azure. How to find the IP address of the attacker Machine?

Our webapp had a XSS attack today and i work in the monitoring team. My client want to confirm the IP address of the attacker. How to find the IP address of the attacker machine.
Look for the access logs. Something like the apache access logs. Once you have identified the request, take the corresponding IP address.
Bear in mind and check following:
That the IP address is external and not e.g. of your load balancer.
If the IP belongs to your load balancer, check the logs on your log balancer or check the X-Forwarded-For header value.
Most probably the IP address will not help at all, because if the attacker was not stupid, he used TOR or proxy himself to hide his real IP address. All you will get will be the exit TOR node IP address or proxy address.

Acumatica sending mail server IP for Self Hosted In-House Exchange

In order for us to allow the Acumatica system to relay our domain and send emails from the Acumatica system I need to open our firewall for the Acumatica sending mail servers. Does anyone happen to know the IP address or IP range of the Acumatica sending mail servers? We host our exchange in-house which is why it is needed.
You need to lookup the servers you are using on page System Email Accounts SM204002:
Usually it's trickier to identify the ports than the IP. For IP you can resolve the host name of the server. Ex: hostname is outlook.office365.com in image above, it resolves to:
The ports will very likely be the same as any other public SMTP server. You know which port to target based on SMTP server type (incoming/outgoing/relay), authentication support (SSL/TLS). For reference from this link:
We were able to figure it out by pinging our Acumatica site. With that IP we were able to put a secure path through our firewall so that it can talk to our internal exchange server. Hopefully, the IP will not change and this setting will continue to work.
For those who need the IP of there Acumatica site ping your site (ex. name.acumatica.com) this IP is the relying IP that Acumatica uses for your account to send mail through there system.
IP Addresses can tend to change. I believe what you are referring to is you are opening firewalls based on specific ip addresses. The challenge there is the Acumatica IP address could change one day and without any notice your email will stop working.
I recommend using an SMTP Server that is open, but requires authentication (logging in) in order to relay emails.

How to use iis with friendly name on local network

I make a web site to my local. I set bindings local.com and www.local.com. I add hosts xml to
127.0.0.1 local.com
127.0.0.1 www.local.com
So, I can connet on my pc like
local.com,
www.local.com,
192.168.1.35
But another pc on my network can't conenct with friendly name
www.local.com,
local.com,
But same pc can connet with ip
192.168.1.35
How can that another pc connect with friendly name ?
IP Addresses are the numerical identification for each device on a computer network.
Named Addresses invented, because remembering each device Address's turned to a difficult job.
So someone must know's which names must be converted to which IP Address.
DNS Servers are responsible to do this translation. But you done that locally. Actually you don't have a DNS Server on your local System, So you can't tell to others that "WWW.Something.COM" is my Address.
If you didn't connected to the internet, you must establish a DNS Server or done this task manually in all clients:
https://helpdeskgeek.com/networking/edit-hosts-file/
Running a DNS Server is another task. you can search for DNS Server applications like https://simpledns.com/ or you can setup a DNS Server using Windows Server. for both scenarios you need to tell to your clients to add your DNS Server Address to their network Adapter settings.
or If you are connected to the Internet, you can Use a NoIP to register a free Address:
https://www.noip.com/
you then need to download an application (In Noip.com) to monitor IP changes, it will monitors your IP address and it changes and then tells to NOIP.com to translate your address into your current IP address.
Actually NOIP will registers your address globally around the Internet network and each one who can access to the internet is able to reach to your address.

rsyslog to send ip address rather than hostname

I already setup centralized logging system on my environment but i keep getting hostname from the client rather than ip address
is there a way to receive or send ip instead of hostname?
thanks
You would need to define a template on both your remote and central server which uses fromhost-ip instead of fromhost or hostname. This way you will transmit the message with the IP in the message and you will save that information on your central server.
I don't know of any standard templates that use IP address over hostname, as normally a hostname is of more use than an IP address
More info on properties can be found here and templates here

Resources