SHUTTLE (in the diagram) is my router, dhcp server, etc. It's running Ubuntu 10.04 LTS Server Edition. I did not have any problems before this weekend and I only did updates after the problem started occurring. My configuration has not changed and I've verified that. MONSTER is not running anything but MySQL, Samba, and OpenSSH. I've been very careful about what's running on my network, and I've also configured everything myself. I'd be happy to let you take a look personally, but an SSH connection doesn't stay open for more than a minute or so...
On Sun, Feb 27, 2011 at 7:05 PM, Mr O <[email protected]> wrote: > Again, consumer modem only has one Ethernet connection. Do you have a > dedicated router or a PC doing routing/firewall. Any chance "Monster" is > running a DHCP server? If you're running a regular router have you checked > for a firmware update? > > > --- On Sun, 2/27/11, Jackman <[email protected]> wrote: > >> From: Jackman <[email protected]> >> Subject: Re: [Eug-lug] Disabling a rogue DHCP server >> To: "Eugene Unix and Gnu/Linux User Group" <[email protected]> >> Date: Sunday, February 27, 2011, 6:45 PM >> And, now, a rendering in ASCII: >> >> ------------------ >> | MONSTER (Server) | <-- eth0:10.10.10.10, static >> ------------------ >> | >> ------------------ >> | SHUTTLE (Router) | <-- eth1 outside (dhclient) / >> eth0:10.10.10.1 >> inside (dhcp3-server 10.10.10.0/24) >> ------------------ >> | >> ---------------- >> | D-Link DCM-202 | <-- 192.168.100.1 (Static, not >> user configurable) >> ---------------- >> | >> (@@@@@@@@@@@@@@@) >> ( Comcast World ) --> The Internet >> (@@@@@@@@@@@@@@@) >> | >> ---------------- >> | D-Link DCM-202 | <-- 192.168.100.1 (Static, not >> user configurable) >> ---------------- >> | >> ---------------- >> | Unknown Router | <-- DHCP Server (192.168.100.0/24) >> ---------------- >> >> Every so often, I get 192.168.100.2 leased to my router >> from >> 192.168.100.1 with a lease of 13 seconds. Very >> annoying. Even though >> I have ignored this server, there is still a network >> interruption >> which prevents browsing, file transfers, remote sessions, >> and so >> forth. >> >> On Sun, Feb 27, 2011 at 6:25 PM, Mr O <[email protected]> >> wrote: >> > >> > How the heck are you addressing two separate physical >> modems? Not to mention a consumer cable modem doesn't do >> DHCP. How exactly are you connected to the internet? >> > >> > >> > --- On Sun, 2/27/11, Jackman <[email protected]> >> wrote: >> > >> > From: Jackman <[email protected]> >> > Subject: Re: [Eug-lug] Disabling a rogue DHCP server >> > To: "Eugene Unix and Gnu/Linux User Group" <[email protected]> >> > Date: Sunday, February 27, 2011, 4:59 PM >> > >> > It turns out that they are using the same modem as >> myself, which maintains a web server on 192.168.100.1. It >> is a dlink dcm-202. Because this overlaps with the rogue >> dhcp subnet, I only hit my local modem when I use a browser. >> Moreover, even if I hit the remote modem, there are no >> settings I can change on it and it doesnt get me to the >> offending dhcp server. I hope that makes sense. >> > >> > The dhcp lease originates from 192.168.100.1, issuing >> to me .2. I use only 10.10.10/24 addresses on my network. >> Would you like me to send my documentation on this problem >> to the mailing list? >> > >> > On Feb 27, 2011 4:16 PM, "Mr O" <[email protected]> >> wrote: >> > >> > How about the obvious, has your computer taken a lease >> from the 'rogue' server? Have you looked at the gateway >> address and tried to connect to it? Most routers are still >> set to admin/admin. With the gateway information you can >> narrow it down to which box or device as well. What kind of >> address is it? 10.? 192.? Do you have physical access to >> everything? >> > >> > >> > --- On Sun, 2/27/11, Jackman <[email protected]> >> wrote: >> > >> > > From: Jackman <[email protected]> >> > > Subject: Re: [Eug-lug] Disabling a rogue DHCP >> server >> > > To: "Eugene Unix and Gnu/Linux User Group" <[email protected]> >> > > Date: Sunday, February 27, 2011, 3:23 PM >> > >> > > Unfortunately, while I'm able to >> > > reject those offers, my connection is >> > > still cutting out ever ... >> > >> > -----Inline Attachment Follows----- >> > >> > _______________________________________________ >> > EUGLUG mailing list >> > [email protected] >> > http://www.euglug.org/mailman/listinfo/euglug >> > >> > >> > _______________________________________________ >> > EUGLUG mailing list >> > [email protected] >> > http://www.euglug.org/mailman/listinfo/euglug >> > >> >> >> >> -- >> Andrew Jackman >> [email protected] >> >> CONFIDENTIALITY NOTICE: This e-mail message, including any >> attachments, is for the sole use of the intended >> recipient(s) and may >> contain confidential and privileged information. Any >> unauthorized >> review, use, disclosure, or distribution is prohibited. If >> you are not >> the intended recipient, please contact the sender by reply >> e-mail and >> destroy all copies of the original message. >> _______________________________________________ >> EUGLUG mailing list >> [email protected] >> http://www.euglug.org/mailman/listinfo/euglug >> > > > > _______________________________________________ > EUGLUG mailing list > [email protected] > http://www.euglug.org/mailman/listinfo/euglug > -- Andrew Jackman [email protected] CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. _______________________________________________ EUGLUG mailing list [email protected] http://www.euglug.org/mailman/listinfo/euglug
