From owner-freebsd-questions Thu Apr 25 22:23:57 2002 Delivered-To: freebsd-questions@freebsd.org Received: from pen.homeip.net (72-17-237-24-cable.juneau.ak.net [24.237.17.72]) by hub.freebsd.org (Postfix) with ESMTP id D372C37B405 for ; Thu, 25 Apr 2002 22:23:53 -0700 (PDT) Received: from localhost (localhost [[UNIX: localhost]]) by pen.homeip.net (8.11.6/8.11.6/SuSE Linux 0.5) id g3Q5NYF15296; Thu, 25 Apr 2002 21:23:34 -0800 Message-Id: <200204260523.g3Q5NYF15296@pen.homeip.net> Content-Type: text/plain; charset="iso-8859-1" From: John Andersen Reply-To: jsa@pen.homeip.net To: Bill Moran , gabriel_ambuehl@buz.ch Subject: Re: dhclient going crazy... Date: Thu, 25 Apr 2002 21:23:34 -0800 X-Mailer: KMail [version 1.3.2] Cc: questions@FreeBSD.ORG References: <1965488492.20020424150235@buz.ch> <3CC86D86.7060100@potentialtech.com> In-Reply-To: <3CC86D86.7060100@potentialtech.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thursday 25 April 2002 12:56 pm, Bill Moran wrote: > the ISP feels I've been running DoS attacks against its DHCP servers: > > Sure sounds like bullsh*t to me.  From the looks of the arp messages > below, it doesn't look like you're the one changing MAC addresses. Doesn't sound like bull to me. Thats exactly whats happening, for one reason or another, he is sucking leases from that server as fast as he can. What could cause this? There is clearly one mac address change reported in your log. What was that caused by? You aren't running LaBrea are you? (It sucks up IPs intentionally). -- _________________________________________________ No I Don't Yahoo! And I'm getting pretty sick of being asked if I do. _________________________________________________ John Andersen / Juneau Alaska To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message