From owner-freebsd-questions Mon Feb 17 17:24:15 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3A26F37B401 for ; Mon, 17 Feb 2003 17:24:13 -0800 (PST) Received: from voo.doo.net (voo.doo.net [81.17.45.210]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9487643F75 for ; Mon, 17 Feb 2003 17:24:11 -0800 (PST) (envelope-from marc@schneiders.org) Received: from localhost (localhost [127.0.0.1]) by voo.doo.net (8.12.6/8.12.6) with ESMTP id h1I1O5DJ035727; Tue, 18 Feb 2003 02:24:07 +0100 (CET) (envelope-from marc@schneiders.org) Date: Tue, 18 Feb 2003 02:24:04 +0100 (CET) From: Marc Schneiders X-X-Sender: To: IAccounts Cc: freebsd Subject: Re: arplookup going mad In-Reply-To: <20030217164039.N45532-100000@diana.northnetworks.ca> Message-ID: <20030218014346.Y35017-100000@voo.doo.net> X-Preferred-email-to: marc@schneiders.org X-Other-email-to: marc@venster.nl X-Organization: Venster (Zeist - NL) X-URL: http://www.bijt.net/ X-SOA: A.ROOT-SERVERS.ORSC. X-OS: FreeBSD: The Power to Serve MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, 17 Feb 2003, at 16:43 [=GMT-0500], IAccounts wrote: > > >Feb 16 18:35:06 voo /kernel: arplookup 213.196.2.97 failed: host is > > >not on local network > > >Feb 16 18:35:06 voo /kernel: arpresolve: can't allocate llinfo for > > >13.16.2.97rt > > I had this back in the summer time, and it was due to having an IP > address aliased on one of my nics in a block that was not on the local > subnet. Thanks for your eply. Alas, this is not the case. The machine has 3 IP numbers from one half class C from my ISP. And a separate full class C (199.a.b/24) is routed to it. This all works fine. The IP number the arplookup complaints are about is from another server, which I have collocated elsewhere. For a while I thought I had caused the problem by giving two of the three IPs my ISP gave me the same reverse DNS names as two on my other (old) server, which at the time I was considering to take down after two months or so, but didn't. I described this a few months back here. Basically reverse DNS now sees the same name for (names and numbers invented): OLD NEW apple.exter.net 13.16.2.97 apple.exter.net 97.98.99.99 pear.joyrider.nl 13.16.2.98 pear.joyrider.nl 97.98.99.98 u.com2.us 97.98.99.110 (main IP) The normal DNS only gives out 13.14.15.16 for apple.exter.net. The old thing. So if the new machine does a lookup for the IP of its own apple.exter.net, it gets 13.16.2.97, and not the IP on its own NIC, 97.98.99.99. Then it starts looking for 13.16.2.97 and sending these arp complaints. This is what I thought. But I think it isn't relevant. For two reasons: 1. Why not similar problems for pear.joyrider.nl? 2. Why still problems when I change the DNS for apple.exter.net and give it two IPs in the zone for exter.net? 3. Since reverse DNS is not only a mess with me (because I have to deal with sys admins of my ISP to get it changed...), but all over the net, I would think this problem would occur a lot more, if wrong reverse DNS caused it. > Check the block the NIC's bound IP is on, then verify that any blocks that > the aliases are in are reachable from that machine. Everything works fine, only at times syslog is very busy. By the way, it stopped as miraculously as it started in the mean time. Which makes me believe it is a problem caused by some router. I would like to understand it though... -- [01] All ideas are vintage not new or perfect. http://logoff.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message