Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Feb 2003 02:24:04 +0100 (CET)
From:      Marc Schneiders <marc@schneiders.org>
To:        IAccounts <iaccounts@northnetworks.ca>
Cc:        freebsd <freebsd-questions@FreeBSD.ORG>
Subject:   Re: arplookup going mad
Message-ID:  <20030218014346.Y35017-100000@voo.doo.net>
In-Reply-To: <20030217164039.N45532-100000@diana.northnetworks.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 17 Feb 2003, at 16:43 [=GMT-0500], IAccounts wrote:

> > >Feb 16 18:35:06 voo /kernel: arplookup 213.196.2.97 failed: host is
> > >not on local network
> > >Feb 16 18:35:06 voo /kernel: arpresolve: can't allocate llinfo for
> > >13.16.2.97rt
>
> I had this back in the summer time, and it was due to having an IP
> address aliased on one of my nics in a block that was not on the local
> subnet.

Thanks for your eply. Alas, this is not the case. The machine has 3 IP
numbers from one half class C from my ISP. And a separate full class C
(199.a.b/24) is routed to it. This all works fine. The IP number the
arplookup complaints are about is from another server, which I have
collocated elsewhere.

For a while I thought I had caused the problem by giving two of the
three IPs my ISP gave me the same reverse DNS names as two on my other
(old) server, which at the time I was considering to take down after
two months or so, but didn't. I described this a few months back here.
Basically reverse DNS now sees the same name for (names and numbers
invented):

OLD					NEW
apple.exter.net	13.16.2.97		apple.exter.net	97.98.99.99
pear.joyrider.nl 13.16.2.98		pear.joyrider.nl 97.98.99.98
					u.com2.us 97.98.99.110 (main
IP)

The normal DNS only gives out 13.14.15.16 for apple.exter.net. The old
thing. So if the new machine does a lookup for the IP of its own
apple.exter.net, it gets 13.16.2.97, and not the IP on its own NIC,
97.98.99.99. Then it starts looking for 13.16.2.97 and sending these
arp complaints.

This is what I thought. But I think it isn't relevant. For two
reasons:

1. Why not similar problems for pear.joyrider.nl?
2. Why still problems when I change the DNS for apple.exter.net and
give it two IPs in the zone for exter.net?
3. Since reverse DNS is not only a mess with me (because I have to
deal with sys admins of my ISP to get it changed...), but all over the
net, I would think this problem would occur a lot more, if wrong
reverse DNS caused it.

> Check the block the NIC's bound IP is on, then verify that any blocks that
> the aliases are in are reachable from that machine.

Everything works fine, only at times syslog is very busy. By the way,
it stopped as miraculously as it started in the mean time. Which makes
me believe it is a problem caused by some router. I would like to
understand it though...

-- 
[01] All ideas are vintage not new or perfect.
http://logoff.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030218014346.Y35017-100000>