From owner-freebsd-isp@FreeBSD.ORG Sat Jan 17 02:25:50 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BC60016A4CE for ; Sat, 17 Jan 2004 02:25:50 -0800 (PST) Received: from mail.park7.number.ru (host212-5-99-220.izmaylovo.ru [212.5.99.220]) by mx1.FreeBSD.org (Postfix) with ESMTP id D498343D5A for ; Sat, 17 Jan 2004 02:25:48 -0800 (PST) (envelope-from blacksir@number.ru) Received: from blacksir.local ([192.168.2.166] helo=blacksir) by mail.park7.number.ru with smtp (Exim 4.30 #0 (Slackware)) id 1AhneG-000Eq8-QG for ; Sat, 17 Jan 2004 13:25:48 +0300 From: =?koi8-r?B?98HTxc7JziDhzMXL08HOxNIgYWthIEJsYWNrU2ly?= To: Date: Sat, 17 Jan 2004 13:24:13 +0300 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 Importance: Normal Subject: FreeBSD deny 'unusual' IP-addresses? X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Jan 2004 10:25:50 -0000 I work in a small ISP company. We are using FreeBSD machines for routing and counting traffic of our clients. I faced with subject 'feature' twise: 1) FreeBSD Server with a real ip in external interface and a lot of IPs like 10.1.1.1/24, 172.16.13.1/24 (NOT ANY 192.168...!)on internal interface. If someone tries to up an ANY address like 192.168.0.1/24 - our server always talk that this address is already in use. Those clients need these addresses, becouse they use our LAN as transport beetween two offices. I solved this problem by upping 192.168.1.1/16 on internal server interface . 2) One of our client use our LAN for testing their experimental hardware device (i don`t know what that thing do, but in connected to network). For some unknown reason that device use a real IP-address that not belongs to me, but they don't want to change the address(why? - I don't know). Our server swears that this address is already in use. I understand, that using such thing is not compliant to standarts, but maybe someone knows how to switch off those kind of alarms? Vasenin Alexander aka BlackSir