On Wed, 24 Jul 2002 22:19:26 +0200 Eric Titl wrote:
> Hi > > Brad Fritz wrote the following at 17:56 24.07.2002: > > >On Wed, 24 Jul 2002 11:42:17 EDT Dr. Richard W. Tibbs wrote: > > > >.......> dmesg outputs a lot of identical lines like: > > > Packet log: input DENY eth0 PROTO=17 10.1.20.1:67 255.255.255.255:68 > > > L=328 S=0x0 I=414nn F=0x000 T=255 (#8) > > > >Nothing to worry about. Just a host on the eth0 side broadcasting > >for a DHCP lease. > > I am not sure it's that irrelevant if an external host with a 10.1.20.1 > broadcasts for a DHCP lease. It may be misconfigured or we may have a > rfc1918 network .... You're right, Erich, I probably dismissed the rfc1918 traffic too quickly. The output of "ip addr show eth0" would shed more light on the situataion. I don't have a dhclient machine handy, but I believe there is a status file in /etc/dhclient or /var/ somewhere (or output in /var/log/syslog) that gives information about what dhclient has done recently. That information would also help us understand what's going on. Dr. Tibbs did say in an earlier posting: > IPSEND=24.yyy.xxx.56 /* latest external IP via the cable modem & > dhcp, anonimized for our protection */ so I assumed (and we all know what that stands for) that he was assigned a public address. All that said, I have seen a fair amount of rfc1918 traffic the WAN segment of various DSL and cable links, so it wouldn't surprise me if the DHCP broadcast traffic from 10.1.20.1 is from a neighbor on the same public network segment that has a misconfigured host. --Brad ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
