[ previous ] [ next ] [ threads ]
 
 From:  dave morgan <morgad at eclipse dot co dot uk>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Anti-spoof rules preventing routing other subnets
 Date:  Wed, 19 Apr 2006 18:30:11 +0100
On Tue, 18 Apr 2006 19:25:20 -0400, "Chris Buechler" <cbuechler at gmail dot com> wrote:

>On 4/18/06, dave morgan <morgad at eclipse dot co dot uk> wrote:
>>
>> I am getting hit by this causing my logs to be filled with entries from
>> my Samba server giving lots of entries like this (slightly edited) -
>>
>> LAN     169.254.185.120, port 138       169.254.255.255, port 138       UDP
>>
>
>That's an automatically assigned IP.  Most DHCP client
>implementations, when they do not receive a DHCP lease, assign
>themselves a 169.254.x.x/16 IP.
>
>If you want to get rid of these log entries, disable logging for the
>default rules under Diagnostics -> Logs, Settings tab.
>
>-Chris
>
this is from /var/log/daemon on the machine which appears as 169.254.185.120 above ...

Apr 18 21:07:35 localhost dhclient: DHCPREQUEST on eth0 to 192.168.1.10 port 67
Apr 18 21:07:35 localhost dhclient: DHCPACK from 192.168.1.10
Apr 18 21:07:35 localhost dhclient: bound to 192.168.1.1 -- renewal in 3600 seconds.
Apr 18 22:07:35 localhost dhclient: DHCPREQUEST on eth0 to 192.168.1.10 port 67
Apr 18 22:07:35 localhost dhclient: DHCPACK from 192.168.1.10
Apr 18 22:07:36 localhost dhclient: bound to 192.168.1.1 -- renewal in 3600 seconds.

Apr 19 17:35:35 localhost ntpd[3896]: ntpd 4.2.0a@1:4.2.0a+stable-2-r Fri Aug 26 10:29:45 UTC 2005
(1)
Apr 19 17:35:35 localhost ntpd[3896]: precision = 1.000 usec
Apr 19 17:35:35 localhost ntpd[3896]: Listening on interface wildcard, 0.0.0.0#123
Apr 19 17:35:35 localhost ntpd[3896]: Listening on interface wildcard, ::#123
Apr 19 17:35:35 localhost ntpd[3896]: Listening on interface lo, 127.0.0.1#123
Apr 19 17:35:35 localhost ntpd[3896]: Listening on interface eth0, 169.254.185.120#123
Apr 19 17:35:35 localhost ntpd[3896]: Listening on interface eth0, 192.168.1.1#123
Apr 19 17:35:35 localhost ntpd[3896]: kernel time sync status 0040

must be something weird with my dhcp client ...

thanks for the tip about the log file!

Dave
-- 
http://www.morgad.no-ip.info/index.html    gpg:0x64B5E037 
Distributed Proofreaders: http://www.pgdp.net
The NTP server pool http://www.pool.ntp.org
http://stellar-attraction.com/