From owner-freebsd-questions Tue Oct 3 11:39:38 2000 Delivered-To: freebsd-questions@freebsd.org Received: from p0016c23.us.kpmg.com (p0016c23.us.kpmg.com [199.207.255.23]) by hub.freebsd.org (Postfix) with ESMTP id 67B2237B502 for ; Tue, 3 Oct 2000 11:39:35 -0700 (PDT) Received: from p0016c56.kweb.us.kpmg.com by p0016c23.us.kpmg.com(Pro-8.9.3/Pro-8.9.3) with SMTP id OAA26757 for ; Tue, 3 Oct 2000 14:39:33 -0400 (EDT) Received: from p0016c22.kweb.us.kpmg.com by p0016c56.kweb.us.kpmg.com via smtpd (for p0016c23.us.kpmg.com [199.207.255.23]) with SMTP; 3 Oct 2000 18:39:33 UT Received: from usnssexc19.kweb.us.kpmg.com by kpmg.com(Pro-8.9.2/Pro-8.9.2) with ESMTP id OAA21828 for ; Tue, 3 Oct 2000 14:39:32 -0400 (EDT) Received: from usnssexc19.kweb.us.kpmg.com (unverified) by usnssexc19.kweb.us.kpmg.com (Content Technologies SMTPRS 2.0.15) with ESMTP id ; Tue, 03 Oct 2000 14:39:24 -0400 Received: by usnssexc19.kweb.us.kpmg.com with Internet Mail Service (5.5.2650.21) id ; Tue, 3 Oct 2000 14:39:24 -0400 Message-Id: <7799D023E51ED311BFB50008C75DD7B40223B370@uschiexc05.kweb.us.kpmg.com> From: "Passki, Jonathan P" To: "'Kirk Brogdon'" , freebsd-questions@freebsd.org Subject: RE: arp messages Date: Tue, 3 Oct 2000 14:39:21 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hehe, gotta like cable modems. It sounds like someone may have accidentally/purposely setup a network interface on the public/routable side of your cable modem network, and you're seeing the traffic. Run a sniffer, and see what you get. Also, I'd run ipfw or ipf, and make sure your network is dropping &/or logging those arps and packets from entering your network, just in case someone's being snoopy/malicious. Jon > -----Original Message----- > From: Kirk Brogdon [mailto:kirk@alaptech.com] > Sent: Tuesday, October 03, 2000 13:35 > To: freebsd-questions@FreeBSD.ORG > Subject: arp messages > > > I get these "arp: 192.168.x.x is on rl0 but got reply from > on fxp0" quite often. Is something actually wrong or > are these just informational? Everything seems to be working okay. > > rl0 is my lan interface and fxp0 is the outside interface > (cable modem). I have the natd_interface parameter pointed > at fxp0 in rc.conf. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > ***************************************************************************** The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this email are subject to the terms and conditions expressed in the governing KPMG client engagement letter. ***************************************************************************** To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message