# Nodered hacked by adding invisible nodes

**URL:** <https://discourse.nodered.org/t/nodered-hacked-by-adding-invisible-nodes/83860>\
**Category:** General\
**Tags:** security\
**Created:** [20 December 2023 08:54 UTC](https://discourse.nodered.org/t/nodered-hacked-by-adding-invisible-nodes/83860 "2023-12-20T08:54:44Z")\
**Posts on this page:** 1\
**Showing post:** 102

<div class="post-metadata">

**Author:** ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)\
**Post date:** [5 January 2024 17:05 UTC](https://discourse.nodered.org/t/nodered-hacked-by-adding-invisible-nodes/83860/102 "2024-01-05T17:05:30Z")

</div>

> [@TotallyInformation](#):
>
> I think even in a home environment some people might have a default gateway that wasn't their router.

It's hardly proof either way but some of my Raspberries with Node-red cannot connect to my 5GHz only router (192.168.1.1) so there is a 2.4GHz access point at 192.168.1.2. Nevertheless the Pies know the correct gateway:

```auto
route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.1.1 0.0.0.0 UG 600 0 0 wlan0
192.168.1.0 0.0.0.0 255.255.255.0 U 600 0 0 wlan0

```

Is it really true that a connection forwarded from beyond the router appears to have the gateway IP?

Using @marcus-j-davies' [whitelisting strategy](https://discourse.nodered.org/t/how-to-whitelist-ip-addresss-that-can-access-node-red/83990) NR can easily whitelist all possible private IPs. But if the gateway IP has to be excluded it's much more difficult. NR might be installed at one location (school) to use at another (home) or used at multiple locations.

---

_[View the full topic](https://discourse.nodered.org/t/nodered-hacked-by-adding-invisible-nodes/83860)._