> Put a non-log rule in [1]. I get IGMP from 172.16.0.5, which is > in the 172.16/16 of my cable modem's HFC address [2], but not in its > 172.../24. I assume it's from Telstra, if it's from a sad customer, > Telstra shouldn't be routing it. But then I get udp > 172.16.0.31:138 -> 172.16.0.255:138, hmmm.
This is in the non-broadcast class b address range... 172.16.0.0/12. Are you sure this interface is a /24 subnet?
