| Server IP : 93.86.61.54 / Your IP : 216.73.216.60 Web Server : Apache/2.4.62 (Ubuntu) System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64 User : www-data ( 33) PHP Version : 8.4.22 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/share/doc/ddclient/ |
Upload File : |
Method 1 ------------------------------------------------------ The following config will allow the Linux machine (10.1.1.2) to read the IP address from the DHCP interface on the Cisco router (eth0) as user ddclient. Since ddclient is configured with a priv level of 1 it cannot do anything except look at the routers stats, ip addresses, etc. This should be pretty harmless even if ddclient's password were to be discovered. This has been tested with Cisco IOS 12.1(5)T5 running on a Cisco 2621 router. Cisco Router Config (Assuming eth0 is DHCP interface) ----------------------------------------------------- user ddclient password password user ddclient priv 1 ip http auth local ip http access-class 99 ip http port 1021 ip http server access-list 99 permit host 10.1.1.2 DDClient Config --------------------------------------------------- use=cisco, fw=10.1.1.1, if=eth0, fw-login=ddclient, fw-password=password Method 2 ------------------------------------------------------ use=fw fw=192.168.1.1/exec/show/interfaces/CR fw-skip=FastEthernet0/0 fw-login=ddclient fw-password=xxxxxxxx