Hello all!

How would one forward a specific outgoing port to a local computer?

E.G.
Router: 192.168.1.1
Comp 1: 192.168.1.100
Comp 2: 192.168.1.200

When Comp 1 tries to browse to an internet page, forward that connection via the router to comp 2 to display a custom webpage. Using WRT54GS

The default firmware for the wrt54gs doesn't support that kind of forwarding if memory serves me (I've had cfw on mine for so long it's fuzzy.) If you install dd-wrt or openwrt you can manually set if you're willing to get into the guts.

Well how can I do this. I have a lab setup with this very configuration and I'm experimenting with Client-Side-Attacks. Assuming Comp 1 is running the Attack, what would be the most efficient way to force comp 2 to connect to comp 1 on the specified port? And if this seems out of forum rules, please forgive me. It's all for the sake of learning and there are no intentions to implement this against another party.

You can't get there from here... at least not with the default firmware on the Linksys.
You might google transparent proxy and iptables and see what that throws up. You would need to use something other than the Linksys though.

Yea I know linksys isn't the best for the job, but I'm trying to emulate a standard american home in my lab as much as possible. So I guess this experiment is a failure. Thanks!

Ok, I can think of one possibility, connect computer 2 to the WAN port and set it up as a proxy/gateway with a second n/w port connected to the internet.

Failing that, flash the Linksys with DD-WRT.

1 members found this post helpful.

Just an Idea....would this work?

|---Victim Comp.
|---Victim Router(WRT54GS-standard firmware)
Internet
|---Attacker's Router (WRT54GS-DD-WRT)
|---Attackers Comp
(Apache Server Running)
(Fast Track Mass Client Side)

If one were to set the Domain Name on the Victim Router to the IP address of the Attackers Router, then forward all incoming ports to port 80 on the Attackers comp, and at the same time have Apache running with the default page being a "Internet Temporarily Down" Error page. Couldn't The attacker essentially force the Victim to connect to them for the attack?

I'm probably wrong but hey, Einstein was considered insane occasionally too!