LOL! I told him about the same thing in a private email as well. Thought it was likely that they were coming in with a bad IP from their previous DHCP.
Gotta love it. :) -----Original Message----- From: Roger Cornelius [mailto:[EMAIL PROTECTED] Sent: Monday, June 27, 2005 1:31 PM To: Cox, Danny H. Cc: [email protected] Subject: Re: [gb-users] odd GB-Ware problem On 06/24/2005 07:51, Cox, Danny H. wrote: > Do you have your wireless router on the same subnet as your copper LAN? > > Danny Yes, the wireless access points (we have several) are on the same subnet as everything else. I've also now determined that the problematic users both have verizon DSL at home, and the verizon modem/routers' dhcp is giving them the same IP as we use for the firewall. When they walk in the building, wham. So is there a way to lock down the IP address of the firewall so it can't be hijacked like this? Thanks, Roger > -----Original Message----- > From: Roger Cornelius [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 16, 2005 8:11 AM > To: [email protected] > Subject: [gb-users] odd GB-Ware problem > > Using GB-Ware 3.62 with a private class C network. > > A few times a week, someone in our sales staff will walk into the > building with their wireless laptop already turned on. When this > happens, the firewall writes a message like the following to syslog > (I've x'd out the actual IP address.): > > Jun 16 08:18:24 gnatbox id=firewall time="2005-06-16 12:18:24" > fw="12100192" pri=3 msg="kernel: arp: 00:90:4b:b4:7e:65 is using my IP > address xxx.xxx.xxx.xxx!" type=mgmt > > When this happens, all machines on the network immediately lose internet > connectivity. What's odd is that the offending laptops never actually > have the IP address of the firewall. > > On the Unix box running our mail server, I run 'arp -d gnatbox' and this > seems to restore connectivity to all machines on the network. > > I'm sure I've left out a lot of detail, but I don't understand the > problem well enough to know what might be important. > > Can anyone provide a clue as to what might be going on and how we can > stop it? > -- > Roger Cornelius [EMAIL PROTECTED] > > ------------------------------------------------------ > To unsubscribe: [EMAIL PROTECTED] > For additional commands: [EMAIL PROTECTED] > Archive: http://archives.gnatbox.com/gb-users/ > -- Roger Cornelius [EMAIL PROTECTED] Special Notice: This email transmission may contain material which is confidential under Florida statutes and is intended to be delivered only to the named addressee. This information belongs to our facility and is legally privileged. Unauthorized dissemination of this information may be a violation of criminal statutes. The recipient of this information is prohibited from disclosing, copying, distributing or using this information except as permitted by current government law governing privacy information issues. Such information must be destroyed after its stated need has been fulfilled, unless otherwise prohibited by law. If this information is received by anyone other than the named addressee, the recipient should immediately notify us at the address or telephone number shown and obtain instructions as to the disposal thereof. Under no circumstances should this material be read, retained, or copied by anyone other than the named addressee. ------------------------------------------------------ To unsubscribe: [EMAIL PROTECTED] For additional commands: [EMAIL PROTECTED] Archive: http://archives.gnatbox.com/gb-users/ ------------------------------------------------------ To unsubscribe: [EMAIL PROTECTED] For additional commands: [EMAIL PROTECTED] Archive: http://archives.gnatbox.com/gb-users/
