Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 16 Jan 2000 11:39:04 -0800 (PST)
From:      "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
To:        oogali@intranova.net (Omachonu Ogali)
Cc:        briang@expnet.net (Brian Gallucci), freebsd-questions@FreeBSD.ORG (FreeBSD), ipfw@FreeBSD.ORG
Subject:   Re: Hmmm
Message-ID:  <200001161939.LAA42975@gndrsh.dnsmgr.net>
In-Reply-To: <Pine.BSF.4.10.10001161220420.78224-100000@hydrant.intranova.net> from Omachonu Ogali at "Jan 16, 2000 12:21:19 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> Windows isn't that retarded, it doesn't send incorrect IP headers out onto
> the wire. Is your router connected to a hub at your ISP/uplink?

Yes windows is that retarded.  And no these are not comming from the ISP
upstream.  I've seen enough of these in tcpdumps that I some times bother
to track down the MAC they come from and fix the windblows network
configuration to eliminate them, though that has become tedious so I just
drop them on the floor at routers now.

> 
> Omachonu Ogali
> Intranova Networking Group
> 
> On Fri, 14 Jan 2000, Rodney W. Grimes wrote:
> 
> > > If you're connected to a hub then that means someone else on that hub has
> > > address space in that area, otherwise, something's barfing on you.
> > 
> > It's just windblows braindamage, it likes to send netbios IP traffic
> > to really strange IP addresses using really strange source addresses
> > some times.
> > 
> > Easy fix is to drop all any 138 to any 138, and any 137 to any 137,
> > unless your fool enough to want to run netbios over the internet,
> > in which case you'll have to allow some specifc IP's to work.
> > 
> > > 
> > > Omachonu Ogali
> > > Intranova Networking Group
> > > 
> > > On Thu, 13 Jan 2000, Brian Gallucci wrote:
> > > 
> > > > This is really weird ->
> > > > 
> > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> > > > 
> > > > We don't own any address space on 216.174.91.0 at all !!
> > > > 
> > > > Can someone tell what this means ??? Am I missing something..
> > > > 
> > > > I think it should look something like - >
> > > > 
> > > > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0
> > > > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0
> > > > 
> > > > Thanks
> > > > -Brian
> > > > 
> > > > 
> > > > 
> > > > 
> > > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > > with "unsubscribe freebsd-ipfw" in the body of the message
> > > > 
> > > 
> > > 
> > > 
> > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > with "unsubscribe freebsd-ipfw" in the body of the message
> > > 
> > 
> > 
> > -- 
> > Rod Grimes - KD7CAX @ CN85sl - (RWG25)               rgrimes@gndrsh.dnsmgr.net
> > 
> 
> 


-- 
Rod Grimes - KD7CAX @ CN85sl - (RWG25)               rgrimes@gndrsh.dnsmgr.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001161939.LAA42975>