IP addr and MAC forwardind

[daredavid]

Hi everyone!

I'm new here but i would be really grateful if anyone could share with me your experience and knowledge. I would like to know, is there any possibility to hide mac and/or mac addresses of my network so anyone from outside couldn't check ip-address or mac-addresses other then my server. I got a gateway server (linux box) and i thought about scenario like this: anyone from internet can see only my server, only his ip-address and only his mac-address. No-one can see other mac/ip addr even in tcp-packets headers, log.files.. so if someone is logging packets from my network he will see only huge transfer from server, not many computers behind him.

Greetings everyone! and of course i'm waiting for reply
Dave

 

[North323]

you can try mac spoofing

 

[burtsbees]

NAT.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[daredavid]

..so no-one have ever try ?
I knew, i'll have to spend lot of time with analysing traffic but i thought, that someome will give me more precise suggestions
Anyway.. if I will discover something interesting, i'll scream here )

 

[VinceWhirlwind]

Burstbees told you how everybody else does this: NAT.

 

[daredavid]

ok i'll celebrate with iptables, tcpdump etc.. and then write down here how it works

 

[burtsbees]

NAT!

For example, an FTP server must have a line in the router that changes the public IP address, which is the routeable address on the internet, to a private IP address, which is NOT routeable on the internet (hence the need for NAT). Look up RFC1918. This example is called port forwarding, or static NAT. Other translations for everything else behind the router these days usually get PATted, which is one-to-many NAT; one Ip address (public, on the outside interface of the edge router) can be used many times at once to be translated. The translations differentiate from eachother at layer 4 by getting assigned random port numbers.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[VinceWhirlwind]

Let's just imagine a bizarre parallel universe where there was no NAT.

Let's just think about this MAC-address thing for a second - he thinks people on the interwebs can see his Server MAC address.
WRONG.
They see the MAC-address of their own router.
Their router sees the MAC address of their ISP's router. *Your* ISP sees the MAC address of *your* router.
*Your* router sees the MAC address of your server.

And IP address?
Well, your laptops either communicate on the internet or they don't.
If they do, they either use their own address, or their address is NATd by something on the way. I think Burtsbees may have mentioned the NAT option, but perhaps he wasn't clear enough...