"Crist J . Clark" wrote:
> 
> On Mon, Sep 25, 2000 at 09:05:28AM -0400, Ted wrote:
> > "Crist J . Clark" wrote:
> > >
> > > On Sun, Sep 24, 2000 at 02:11:37PM -0400, Ted Sikora wrote:
> > > > "Crist J . Clark" wrote:
> > > > >
> > > > > On Sat, Sep 23, 2000 at 05:42:02PM -0400, Ted Sikora wrote:
> > > > > > I did a buildworld on several servers last week (STABLE)
> > > > > > and they all get this error message.
> > > > > > /kernel: arp: 192.168.1.1 is on ed0 but got reply from 00:10:b5:6c:33:83
> > > > > > on dc0
> > > > > > I have IPv6 and gateway enabled.
> > > > >
> > > > > I assume you sent this to -stable because you were not getting this
> > > > > message on these systems before you made a new STABLE?
> > > > I have been following stable for a while with these machines. On the
> > > > last buildworld the messages appeared.
> > > > >
> > > > > Well... _Is_ 192.168.1.1 on ed0 or dc0? People usually get this error
> > > > 192.168.1.1 is on ed0 Internal network is thin-coax
> > > > dc0 is connected to a hub out to the Internet
> > >
> > > Well someone claiming to own 192.168.1.1 is out there on your LAN to
> > > the Internet. Can you track down that MAC, 00:10:b5:6c:33:83? It's
> > > from a Accton Technology Corp. piece of equipment if that is any help.
> > Do not have such a thing. That's a nic card? I have Kingston/NetGear
> > Tulip and Acer ne2k-pci's on all machines. Has someone breeched my
> > Internal Network?
> 
> This anomolous traffic is coming from the outside interface, but it is
> a possibility. There are two major possibilities that I see. (1) You
> are leaking frames from the internal LAN to the external LAN. In
> another description of your net, you mentioned that more than one
> machine is connected to both the internal LAN (192.1.1.0) and to the
> external one. If one of these machines is in a bridging mode, this
> would explain the problem. Similarly, has someone put the wrong cable
> in a hub somewhere and crossed both nets? (2) Someone else on Out
> There is using those addresses and they are getting sent to you (for
> whatever reason). I don't recall a description of your external
> net. Are there untrusted machines out there? An untrusted LAN? Are you
> connected to your ISP by a routing device or bridging device?
> --
> Crist J. Clark                           [EMAIL PROTECTED]

I have a main server(Linux) connected with a router to a fractional T-1 
FreeBSD #1 has an ADSL connection to an ISP (website)
FreeBSD #2 has a cable modem to @Home via a hub shared with Tru64
OpenBSD (masqed conection via 192.168.1.3 to Linux(192.168.1.1) 
Compaq Tru64 connected via hub to FreeBSD #2 for Internet access 
OS/2 Server (masqued connection via 192.168.1.6 to Linux(192.168.1.1)

All machines are connected via second nic cards(ne2k-pci) except Tru64
(uses aui>ethernet adapter)  to the internal network. Internal is coax
with teminators, no hub. All primary cards are Tulip cards including the
Alpha.
 
--
Ted Sikora
Jtl Development Group
[EMAIL PROTECTED]
Linux the choice of a GNU generation............


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message

Reply via email to