-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there girls and boys,
i have a router running debian stable with two NICs in it. Everything was running fine until the 30 of March when i started getting these messages in the syslog (excerpt): Mar 30 15:28:47 firewall kernel: martian source 192.168.45.1 from 192.168.45.1, on dev eth1 Mar 30 15:28:47 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:06 Mar 30 15:28:48 firewall kernel: martian source 192.168.45.1 from 192.168.45.1, on dev eth1 Mar 30 15:28:48 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:06 Mar 30 15:28:49 firewall kernel: martian source 192.168.45.1 from 192.168.45.1, on dev eth1 Mar 30 15:28:49 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:06 Mar 30 15:28:50 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:50 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:51 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:51 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:51 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:51 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:52 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:52 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:53 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:53 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:54 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:54 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:54 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:54 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:55 firewall kernel: martian source 192.168.45.255 from 192.168.45.1, on dev eth1 Mar 30 15:28:55 firewall kernel: ll header: ff:ff:ff:ff:ff:ff:00:0e:a6:28:77:72:08:00 Mar 30 15:28:57 firewall kernel: NET: 4 messages suppressed. - ---EOF--- 192.168.45.x/24 is the my LAN range. After going on this way for about an hour, these messages ceased and after that i can't connect to the internet from the firewall router although everything (ifconfig, loaded modules, etc) seems to be normal. When i run tethereal listening on the eth1 and try to ping any host outside, tethereal doesn't log anything. When i ping a LAN host however, the ECHO request and reply packets travel fine and get logged. The most amazing thing about my situation is the fact, that i can still access the internet from any host on the LAN. Upon building any connection though, i notice a several seconds delay due to resolving the peer hostname which i did not experience before the thing with the martial packets started. I RTFMs on the net but i can't find something that fits my case. Any help is appreciated, Boris. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAb9GHiBySr3Fn37QRApicAKCQN41fCuYTPhwCheDbMsknM1oDcwCfdAit +aX3LJgjPgIUP6+oiI9ailc= =/pSL -----END PGP SIGNATURE-----
