[nSLUG] Eastlink cable modem access

Gerald linux at zdoit.airpost.net
Tue Feb 5 23:25:45 AST 2008


Scott Walsh wrote:
> Almost 40k broadcasts from this address in 10.0.0.0/8 
> <http://10.0.0.0/8>, all to the external interface of my gateway.
> 
> Feb  5 20:01:36 gateway kernel: iptables dropping: IN=eth0 OUT= 
> MAC=ff:ff:ff:ff:ff:ff:00:01:5c:23:08:02:08:00 SRC=10.18.80.1 
> <http://10.18.80.1> DST=255.255.255.255 <http://255.255.255.255> LEN=328 
> TOS=0x00 PREC=0x00 TTL=64 ID=45441 PROTO=UDP S
> PT=67 DPT=68 LEN=308
> 
> Someone that I work with recently said that the actual HFC interface of 
> the modem is on the 10 network, which would seem that it's passing 
> things through that it shouldn't, and this is a SB5101.
> 
. .  . .

Scott,

Are the packets responses to DHCP requests? Perhaps every DHCP request 
on your branch of Eastlink.

-- 
Gerald



More information about the nSLUG mailing list