Date: Mon, 25 Sep 2000 11:48:08 -0400 From: Ted <webmaster@powerusersbbs.com> To: cjclark@alum.mit.edu, "freebsd-stable@FreeBSD.ORG" <freebsd-stable@FreeBSD.ORG> Subject: Re: arp Message-ID: <39CF73B8.127D423B@powerusersbbs.com> References: <39CD23AA.37F4DF81@powerusersbbs.com> <20000923203357.C42636@149.211.6.64.reflexcom.com> <39CE43D9.7149C1F2@powerusersbbs.com> <20000924213552.D59015@149.211.6.64.reflexcom.com> <39CF4D98.AD122433@powerusersbbs.com> <20000925082819.I59015@149.211.6.64.reflexcom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
"Crist J . Clark" wrote: > > On Mon, Sep 25, 2000 at 09:05:28AM -0400, Ted wrote: > > "Crist J . Clark" wrote: > > > > > > On Sun, Sep 24, 2000 at 02:11:37PM -0400, Ted Sikora wrote: > > > > "Crist J . Clark" wrote: > > > > > > > > > > On Sat, Sep 23, 2000 at 05:42:02PM -0400, Ted Sikora wrote: > > > > > > I did a buildworld on several servers last week (STABLE) > > > > > > and they all get this error message. > > > > > > /kernel: arp: 192.168.1.1 is on ed0 but got reply from 00:10:b5:6c:33:83 > > > > > > on dc0 > > > > > > I have IPv6 and gateway enabled. > > > > > > > > > > I assume you sent this to -stable because you were not getting this > > > > > message on these systems before you made a new STABLE? > > > > I have been following stable for a while with these machines. On the > > > > last buildworld the messages appeared. > > > > > > > > > > Well... _Is_ 192.168.1.1 on ed0 or dc0? People usually get this error > > > > 192.168.1.1 is on ed0 Internal network is thin-coax > > > > dc0 is connected to a hub out to the Internet > > > > > > Well someone claiming to own 192.168.1.1 is out there on your LAN to > > > the Internet. Can you track down that MAC, 00:10:b5:6c:33:83? It's > > > from a Accton Technology Corp. piece of equipment if that is any help. > > Do not have such a thing. That's a nic card? I have Kingston/NetGear > > Tulip and Acer ne2k-pci's on all machines. Has someone breeched my > > Internal Network? > > This anomolous traffic is coming from the outside interface, but it is > a possibility. There are two major possibilities that I see. (1) You > are leaking frames from the internal LAN to the external LAN. In > another description of your net, you mentioned that more than one > machine is connected to both the internal LAN (192.1.1.0) and to the > external one. If one of these machines is in a bridging mode, this > would explain the problem. Similarly, has someone put the wrong cable > in a hub somewhere and crossed both nets? (2) Someone else on Out > There is using those addresses and they are getting sent to you (for > whatever reason). I don't recall a description of your external > net. Are there untrusted machines out there? An untrusted LAN? Are you > connected to your ISP by a routing device or bridging device? > -- > Crist J. Clark cjclark@alum.mit.edu I have a main server(Linux) connected with a router to a fractional T-1 FreeBSD #1 has an ADSL connection to an ISP (website) FreeBSD #2 has a cable modem to @Home via a hub shared with Tru64 OpenBSD (masqed conection via 192.168.1.3 to Linux(192.168.1.1) Compaq Tru64 connected via hub to FreeBSD #2 for Internet access OS/2 Server (masqued connection via 192.168.1.6 to Linux(192.168.1.1) All machines are connected via second nic cards(ne2k-pci) except Tru64 (uses aui>ethernet adapter) to the internal network. Internal is coax with teminators, no hub. All primary cards are Tulip cards including the Alpha. -- Ted Sikora Jtl Development Group tsikora@powerusersbbs.com Linux the choice of a GNU generation............ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39CF73B8.127D423B>