PfSense reporting private IP and not WAN ip

siddharthm

Hi

pfSense is reporting my private IP and not the WAN IP.
Is there any rule which must be configured. Please see the attachment.
![New Bitmap Image.jpg](/public/imported_attachments/1/New Bitmap Image.jpg)
![New Bitmap Image.jpg_thumb](/public/imported_attachments/1/New Bitmap Image.jpg_thumb)

johnpoz

Yeah thats not really possible.. not sure how they are getting the IP on that page - but its not possible to be talking to a public website with a rfc1918 address. Unless you were local to where the page was hosted.

Not something that would be reported by pfsense.. You would have to ask them how they determine your IP. I just went there it was fine.

KOM

I get INVALID IP4 ADDRESS

kejianshi

Did you photoshop the website image or are they really just that screwed up?

siddharthm

I dd not photoshop anything. Infact i wanted to check is pfsense using the correct wan port for browsing… anyways i think its fine now. there might have been a temp glitch.

kejianshi

Yeah - I'd say their website was screwing up. haha.

siddharthm

Got it.
when you go through squid websites like dsstuff.com are reporting your private ip.

any ways to stop this thing happening

johnpoz

You would have to know how the site is getting this IP.. Its impossible for you to talk to them using a private IP, so its their flawed way of getting the ip if they are showing a rfc1918 address.

doktornotor

@johnpoz:

You would have to know how the site is getting this IP..

X-Forwarded-For; 300% broken idiotic behaviour.

@OP: Stop using idiotic sites to check your external IPs.

kejianshi

Yeah - That X-Forward crap can (and probably should) be turned off in squid settings.

There are actually sites that will refuse you service if they detect a proxy at all.

There are several little check blocks you can click to hide the fact that you are using a proxy.

No shoes, no shirt - fine… Proxy - no service.

muswellhillbilly

If you type 'What's my ip' into Google it ought to give you the valid external address. As can many other sites (whatsmyip.com, whatsmyip.org, and so on…)

jimp

I have also seen some pages use some JavaScript and/or WebRTC trickery to find the local IP address, but usually a proxy and X-Forwarded-For is the culprit.