Jump to content

Why Is This (Dhcp Router Over Rulez Dhcp Server Pineapple)


MV2FNT
 Share

Recommended Posts

Hi there

sorry if this is a dumb questiion.

i did the following.

i made a network bridge on a linux box with 2 interfaces

i have put this between the pineapple and my mainrouter.

with the idea to externally DNSspoof things.

i connected this to the WAN port of the pineapple.

with no DNSspoof active every thing works.

all traffic going to the bridge.

with dnsspoof enabled i see the requests on the terminal but redirecting does not wrk.

by mistake during trouble shooting i have put the bridge on the lan port of the pineapple.

suddenly dnsspoofing is working. but i am getting my ip of the mainrouter

not from the pineapple.

if i look at my ipsettings of the client connecting to the pineapple

i see my ip adress changing between 192.168.0.X and 172.16.42.x

i guess to dhcp servers are fighting each other. but why does the more upstream win ?

grt

MV2FNT

Link to comment
Share on other sites

hm switch out both would give clients no ip right ??

i just don't get it

on the linuxbox /mitm i do this

ifconfig eth0 0.0.0.0

ifconfig eth1 0.0.0.0

brctl addbr mybridge

brctl addif mybridge eth0

brctl addif mybridge eth1

ifconfig mybridge up

ifconfig mybridge 192.168.0.123/24

on the pineapple i run the iptables script from the wiki

iptables -A FORWARD -i eth1 -o wlan0 -s 172.16.42.0 -m state --state NEW -j ACCEPT

iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

all clients have internet connection no problemo so far.

then i start dnsspoof on the linux box

dnsspoof -i mybridge -f hostfile

contents of hostfile

192.168.0.101 *.*

i see dnsspoof feedback reacting on a request twice

ip-pineapple > 8.8.8.8:53 url

ip-pineapple > iprouter:53 url

when pinging on the client

ping www.google.com

cannot resolve google

ping 8.8.8.8

all fine

is the client confused because it is getting 2 reactions ?

what am i missing here ???

is the work around to drop response of the mainrouter with iptables ?

if so how ?

Edited by MV2FNT
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...