On Mon, 14 Jun 2004, Chris Buechler wrote:

> > I keep getting these messages in my system log and my client PCs can't
> > connect to the application on the "wan" side of the firewall.
> >
> > /kernel: arp: 192.168.103.23 moved from 00:00:0c:07:ac:06 to
> > 00:0d:28:13:53:f7 on sis1
> >
> > My monowall is setup very simple. No rules for inbound, standard
> config
> > on NAT, no traffic shaping, no proxy arp setup. I do have a large
> > network on the LAN side 192.168.0.0 /16. I have searched the archives
> > but no luck.
>
> ISP's router failing over to another NIC (I've seen poorly configured
> failover on Cisco gear hop interfaces, and hence MAC addresses
> repeatedly and generate messages such as this).

and you're possibly right. the manufacturer for both mac addresses in the
OP is Cisco.

Regards,                           /\_/\   "All dogs go to heaven."
dinesh at alphaque dot com                (0 0)    http://www.alphaque.com/
+==========================----oOO--(_)--OOo----==========================+
| for a in past present future; do                                        |
|   for b in clients employers associates relatives neighbours pets; do   |
|   echo "The opinions here in no way reflect the opinions of my $a $b."  |
| done; done                                                              |
+=========================================================================+