dhcpcd-discuss

Re: DHCP packets from outside of the network

zless

Fri Sep 28 13:07:30 2018

În ziua de vineri, 28 septembrie 2018, la 13:32:28 EEST, Roy Marples a scris:
> Hi
> 
> On 28/09/2018 09:36, zless wrote:
> > Hello,
> > 
> > Just recently my dhcpcd 6.11.5 started logging lots of messages like this:
> > 
> > eno1: truncated packet (0) from 101.249.179.246
> > eno1: truncated packet (0) from 180.95.225.130
> > eno1: truncated packet (0) from 219.142.242.201
> > eno1: truncated packet (0) from 171.12.10.197
> > 
> > I don't really understand why this is happening. Is the daemon trying to 
reach
> > those external IPs? Or are these incoming connections from outside that 
are
> > not properly filtered by the ISP?
> 
> It means you received a BOOTP packet from these machines which is 
> invalid - basically it's too short to be a proper BOOTP message.
> I would guess someone is trying to hack your DHCP client and dhcpcd is 
> being noisy about it.
> 

Thanks Roy.

Yes, something looks terribly wrong at my provider (Online). They push the 
server IPs with DHCP but at the same time they don't seem to block it from 
outside (unless the source IPs are spoofed).

I'll have to check if it's possible to block outside connections while keeping 
the provider DHCP functional.






References:
DHCP packets from outside of the networkzless
Re: DHCP packets from outside of the networkRoy Marples
Archive administrator: postmaster@marples.name