From owner-freebsd-ipfw Sun Jan 16 11:39:20 2000 Delivered-To: freebsd-ipfw@freebsd.org Received: from gndrsh.dnsmgr.net (GndRsh.dnsmgr.net [198.145.92.4]) by hub.freebsd.org (Postfix) with ESMTP id 00D0314DCC; Sun, 16 Jan 2000 11:39:11 -0800 (PST) (envelope-from freebsd@gndrsh.dnsmgr.net) Received: (from freebsd@localhost) by gndrsh.dnsmgr.net (8.9.3/8.9.3) id LAA42975; Sun, 16 Jan 2000 11:39:04 -0800 (PST) (envelope-from freebsd) From: "Rodney W. Grimes" Message-Id: <200001161939.LAA42975@gndrsh.dnsmgr.net> Subject: Re: Hmmm In-Reply-To: from Omachonu Ogali at "Jan 16, 2000 12:21:19 pm" To: oogali@intranova.net (Omachonu Ogali) Date: Sun, 16 Jan 2000 11:39:04 -0800 (PST) Cc: briang@expnet.net (Brian Gallucci), freebsd-questions@FreeBSD.ORG (FreeBSD), ipfw@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Windows isn't that retarded, it doesn't send incorrect IP headers out onto > the wire. Is your router connected to a hub at your ISP/uplink? Yes windows is that retarded. And no these are not comming from the ISP upstream. I've seen enough of these in tcpdumps that I some times bother to track down the MAC they come from and fix the windblows network configuration to eliminate them, though that has become tedious so I just drop them on the floor at routers now. > > Omachonu Ogali > Intranova Networking Group > > On Fri, 14 Jan 2000, Rodney W. Grimes wrote: > > > > If you're connected to a hub then that means someone else on that hub has > > > address space in that area, otherwise, something's barfing on you. > > > > It's just windblows braindamage, it likes to send netbios IP traffic > > to really strange IP addresses using really strange source addresses > > some times. > > > > Easy fix is to drop all any 138 to any 138, and any 137 to any 137, > > unless your fool enough to want to run netbios over the internet, > > in which case you'll have to allow some specifc IP's to work. > > > > > > > > Omachonu Ogali > > > Intranova Networking Group > > > > > > On Thu, 13 Jan 2000, Brian Gallucci wrote: > > > > > > > This is really weird -> > > > > > > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > > > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > > > > > > > We don't own any address space on 216.174.91.0 at all !! > > > > > > > > Can someone tell what this means ??? Am I missing something.. > > > > > > > > I think it should look something like - > > > > > > > > > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0 > > > > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0 > > > > > > > > Thanks > > > > -Brian > > > > > > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > with "unsubscribe freebsd-ipfw" in the body of the message > > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-ipfw" in the body of the message > > > > > > > > > -- > > Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net > > > > -- Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message