blob: 23b14a4a23ea7d8230377368473a02e38f852ea2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-discuss] Odd entry in log file
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA911E7.9030801%40Rock3d.net%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="007254.html">
<LINK REL="Next" HREF="007256.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-discuss] Odd entry in log file</H1>
<B>imnotpc</B>
<A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA911E7.9030801%40Rock3d.net%3E"
TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
</A><BR>
<I>Tue May 8 14:30:31 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="007254.html">[Mageia-discuss] Odd entry in log file
</A></li>
<LI>Next message: <A HREF="007256.html">[Mageia-discuss] Odd entry in log file
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7255">[ date ]</a>
<a href="thread.html#7255">[ thread ]</a>
<a href="subject.html#7255">[ subject ]</a>
<a href="author.html#7255">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>On 05/08/2012 06:47 AM, Frank Griffin wrote:
><i> On 05/07/2012 07:42 PM, imnotpc wrote:
</I>>><i>
</I>>><i> Well the Comcast cable modem was a dead end. I checked it and DHCP is
</I>>><i> disabled, and even if it were enabled it uses a completely different
</I>>><i> subnet. Besides, It would be coming in on eth2 and not eth0. I
</I>>><i> checked the wireless router in the LAN and it uses the 192.168.3.0/24
</I>>><i> subnet for it's DHCP connections. It has a fixed IP of 192.168.0.100
</I>>><i> on the LAN interface so I don't know why these IPs would ever be seen
</I>>><i> by the firewall/gateway box, but this looks like the most likely source.
</I>><i> Waitaminnit. Yesterday you wrote:
</I>><i>
</I>>><i>
</I>>><i> Wireless Router Attached to the LAN: The LAN facing NIC on the
</I>>><i> wireless router has a fixed IP of 192.168.0.100. The wireless
</I>>><i> interface is configured to assign IPs in the 192.168.2.0/24 range to
</I>>><i> the wireless hosts using DHCP.
</I>><i>
</I>><i> If the wireless router DHCP is setup to assign from 192.168.3.0/24,
</I>><i> then that's where the 192.168.3.2 is coming from. Unless your gateway
</I>><i> is set to masquerade 192.168.3.0/24, you get exactly what you're seeing.
</I>><i>
</I>
Yes, that was a typo. 192.168.3.0/24 is correct. But the wireless router
has to NAT those addresses to 192.168.0.100 or no traffic would get
through. In order for the martian packets to be coming from the wireless
router then it would have to be selectively NATing some packets and not
others.
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="007254.html">[Mageia-discuss] Odd entry in log file
</A></li>
<LI>Next message: <A HREF="007256.html">[Mageia-discuss] Odd entry in log file
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7255">[ date ]</a>
<a href="thread.html#7255">[ thread ]</a>
<a href="subject.html#7255">[ subject ]</a>
<a href="author.html#7255">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
mailing list</a><br>
</body></html>
|