[Dshield] Strange arpwatch reports

Mark Tombaugh mtombaugh at alliedcc.com
Fri Oct 29 12:59:23 GMT 2004


On Friday 29 October 2004 3:46 am, Jon R. Kibler wrote:
> I'm completely stumped as to what is going on here... anyone have any
> ideas?

I have an idea. It might not necessarily be right, but at least its an idea.

It might help to:

1. run 'no ip proxy-arp' on the interface
2. use access-lists to keep X.Y.50.0/24 from routing through the interface or 
better yet use access-lists to only allow X.Y.2.0/24 to route through the 
interface if thats all it needs to do.

Use with caution, advice provided pre-caffeine. 

-- 
Mark Tombaugh <mtombaugh at alliedcc.com>
Allied Computer Corporation <http://www.alliedcc.com>
USiHOST, iNC. <http://www.usihost.com>



More information about the list mailing list