Network People, Xp Pros, Computer Geeks
Senior Member
Joined: Jul 2002
Posts: 2,483
From: Fayetteville, Georgia
Yeah I'm taking a Cisco course at my coughhighschoolcough. So the packet must be coming from a Cisco router of somesort. I'm pretty sure ARP spoofing is a tool commonly used by script kiddies and the like. Do you have a firewall?
Senior Member
Joined: Aug 2002
Posts: 1,278
From: Columbia, MD
I don't really have much to add except that I agree with Scott's idea that your ISP's DNS servers are going up and down...
I was having similar problems for a while and they went away when I set my router as a higher priority DNS server in my networking config, my Dlink router acts as a DNS cache, I have 4 DNS servers set up in my networking config... 1st one is my local DNS server for my network at home (have test machines for work), then my router address, and then the DNS servers provided by my ISP, haven't had any problems since then, but you never know, they could've fixed whatever was wrong since then...
hope you track it down...that crap sucks
I was having similar problems for a while and they went away when I set my router as a higher priority DNS server in my networking config, my Dlink router acts as a DNS cache, I have 4 DNS servers set up in my networking config... 1st one is my local DNS server for my network at home (have test machines for work), then my router address, and then the DNS servers provided by my ISP, haven't had any problems since then, but you never know, they could've fixed whatever was wrong since then...
hope you track it down...that crap sucks
Senior Member
Joined: Mar 2002
Posts: 255
Jay -
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
Thread Starter
Senior Member
Joined: Nov 2001
Posts: 4,981
From: NJ
OK guys thanks for all the help, there is only one problem, I don't understand all the technical mumbo jumbo spit out at me. LOL I'm not schooled on all this crap, I teach myself as I go along, so If we can put this stuff into layman's terms, maybe I can fix it 
Senior Member
Joined: Jul 2002
Posts: 2,483
From: Fayetteville, Georgia
Originally Posted by works2r' date='Mar 2 2003, 10:54 AM
Jay -
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
What I don't understand is how the ISP discriminates. I can understand if you weren't using a router/switch/hub, can anyone explain that?
Senior Member
Joined: Mar 2002
Posts: 255
Originally Posted by Dysfnctnl85' date='Mar 2 2003, 05:42 PM
[quote name='works2r' date='Mar 2 2003, 10:54 AM']Jay -
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
What I don't understand is how the ISP discriminates. I can understand if you weren't using a router/switch/hub, can anyone explain that? [/quote]
I'm a hired gun of all sorts in I/T.
Im a problem eliminator
and Jay -
read your manual on your netgear router, there should be a setting or configuration menu that tells you about how to pick up your cable/dsl connection setup, and then in it, there should be a release time or something of that nature, and just set it for like 24 hours (its probably in seconds or milliseconds.. if so, just remember 1s = 1000ms, and do the conversion from there
Senior Member
Joined: Mar 2002
Posts: 255
Originally Posted by Dysfnctnl85' date='Mar 2 2003, 05:42 PM
[quote name='works2r' date='Mar 2 2003, 10:54 AM']Jay -
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
doesyour new router release the IP address correctly on a timed basis?
OO isn't very friendly to people to hog IP address space w/o paying for it. Your ARP cache is going down because they're dropping your DNS entries from their DHCP host ACL.
I know, it used to happen to me, and once I started releasing my IPs every night, it was fine.
What I don't understand is how the ISP discriminates. I can understand if you weren't using a router/switch/hub, can anyone explain that? [/quote]
w/r/t how the ISP discriminates, its easy. All you have to do is set an ACL based on Leased time for DHCP IP, and no longer allow ARP requests to syn/ack, fin/ack when they are greater than max leased time.
Its great for providers who are trying to stop all the jackasses who are trying to maintain a FTP site with pseudo business type uptime on their network without paying.. sucks for all of us who are just regular users tryin to deal with non-release.
*shrug* ah well, c'est la vie.
Thread Starter
Senior Member
Joined: Nov 2001
Posts: 4,981
From: NJ
Originally Posted by works2r' date='Mar 2 2003, 05:59 PM
[
w/r/t how the ISP discriminates, its easy. All you have to do is set an ACL based on Leased time for DHCP IP, and no longer allow ARP requests to syn/ack, fin/ack when they are greater than max leased time.
Its great for providers who are trying to stop all the jackasses who are trying to maintain a FTP site with pseudo business type uptime on their network without paying.. sucks for all of us who are just regular users tryin to deal with non-release.
*shrug* ah well, c'est la vie.
w/r/t how the ISP discriminates, its easy. All you have to do is set an ACL based on Leased time for DHCP IP, and no longer allow ARP requests to syn/ack, fin/ack when they are greater than max leased time.
Its great for providers who are trying to stop all the jackasses who are trying to maintain a FTP site with pseudo business type uptime on their network without paying.. sucks for all of us who are just regular users tryin to deal with non-release.
*shrug* ah well, c'est la vie.
Senior Member
Joined: Mar 2002
Posts: 255
Originally Posted by turbovr6' date='Mar 2 2003, 11:29 PM
[quote name='works2r' date='Mar 2 2003, 05:59 PM'] [
w/r/t how the ISP discriminates, its easy. All you have to do is set an ACL based on Leased time for DHCP IP, and no longer allow ARP requests to syn/ack, fin/ack when they are greater than max leased time.
Its great for providers who are trying to stop all the jackasses who are trying to maintain a FTP site with pseudo business type uptime on their network without paying.. sucks for all of us who are just regular users tryin to deal with non-release.
*shrug* ah well, c'est la vie.
w/r/t how the ISP discriminates, its easy. All you have to do is set an ACL based on Leased time for DHCP IP, and no longer allow ARP requests to syn/ack, fin/ack when they are greater than max leased time.
Its great for providers who are trying to stop all the jackasses who are trying to maintain a FTP site with pseudo business type uptime on their network without paying.. sucks for all of us who are just regular users tryin to deal with non-release.
*shrug* ah well, c'est la vie.
did it work for you??