Vulpine wrote:Disable Windows Firewall. It's generally enabled by default.
lmarmisa: I didn't configure the firewall at all, I literally installed the Windows 7 guest, got it onto my subnet then tried pinging it. I can't imagine Win7 blocking pings by default. I'll check though.
emiller12345: heres what happened when I ran that command:
so its responding to ARP but not ICMP? I'm watching what wireshark captures when I ping 192.168.1.3 and plenty of these come up:
- Code: Select all
$ arping -I eth0 -c 1 192.168.1.13
WARNING: interface is ignored: Operation not permitted
ARPING 192.168.1.13 from 192.168.1.17 eth0
Unicast reply from 192.168.1.13 [08:00:27:30:66:93] 0.982ms
Sent 1 probes (1 broadcast(s))
Received 1 response(s)
I don't know too much about TCP/IP so I don't know what to make of it but wireshark is picking up plenty of packets coming from 192.168.1.13. Loads of SSDP packets what ever they are. Strangely enough wireshark captures packets from 2 other IP's 192.168.1.3 and 192.168.1.12, they might be the other laptops in the house but when I do a ping sweep with fping the only live host it identifies is me.
EDIT: I installed wireshark on the windows host and pinged it and heres what it sniffed:
so it is receiving to the pings and responding to them. Would I be right in assuming it has to be the ubuntu host thats ignoring the pings? Ah **** now I remember, I configured firestarter to not allow "Echo reply (pong)" in ICMP filtering, I thought that meant it would stop my computer from replying to pings in order to make myself invisible to ping sweeps. Instead it was blocking replies from computers I ping. That was pretty stupid on my part lol.
A quick side question: I notice that the windows guest has a different MAC address to my ethernet cards MAC address. Do VM's use virtual network interfaces or something?
Goatboy wrote:Vulpine wrote:Disable Windows Firewall. It's generally enabled by default.
This. I cannot tell you how many times we had people fuck up in our "hacking" (read: entry-level security of 10 years ago) course because of this.
Users browsing this forum: No registered users and 0 guests