David Burgess wrote:
> I hate to introduce what is probably a red herring, but while I'm shooting
> in the dark, I might point out that the m0n0wall has its LAN and WAN ports
> plugged into a single switch. Other ports on the switch connect to other
> and the upstream gateway. The only side-effect this setup that I have
> observed to date is the complete domination of our system logs by messages
> in the form of, "kernel: arp: 10.0.253.234 is on nve0 but got reply from
> 00:06:5b:af:b2:9a on em0".
> While I don't like having the LAN and WAN ports on the same switch, the
> chief has been doing it this way since before I was on board, and
> 99.999% of
> our traffic appears to pass normally. Could my occasional but annoying dhcp
> problem arise from this setup? Is there some other possible explanation?
This will cause some major arp screwiness. I think it could even cause
the switch to act as if it was an arp poisoning attack.