full-disclosure - Unusual behaviour of PIX

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1476A38D9F6470438B73B006DD4E604301F47552@WWLXU1004.worldwide.bbc.co.uk>
From: patrick.doyle at bbc.co.uk (Patrick Doyle)
Subject: Unusual behaviour of PIX

Proxy arp is on by default on the PIX.
 
Your WAN clients could be getting the Mac Address of the PIX, instead of the DHCP server when trying to obtain an IP address via DHCP.
 
You can turn off proxy arp by using
 
sysopt noproxyarp if_name
 
This could break NAT tho', another way of doing this would be to create a static arp entry for your DHCP server on the PIX
 
arp if_name ip mac 
 
www.cisco.com should be able to help you out with any such queries.
 
Paddy

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of jacobjango
Sent: 16 February 2004 06:46
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Unusual behaviour of PIX


PIX 505/506/515
FOS: 6.2
 
I configured DHCP Server on inside*LAN* network and DHCP Client on Outside *WAN* network, 
DHCP server pool (192.168.100.100-192.168.100.110)<<for testing purpose>
 
Observation:: for some time my wan network went dead and on Rebooting PIX it took IP address of Private Network.<<192.168.100.103>>
 
My point here is Inbound and outbound are two different intrefaces and are designed to do specific task. How come the above happened any theories.
 
Azhar M.W.
Hyderabad

 


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system ( http://www.grisoft.com).
Version: 6.0.585 / Virus Database: 370 - Release Date: 11/02/2004

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040216/c47ce19e/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 145 bytes
Desc: Blank Bkgrd.gif
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040216/c47ce19e/attachment.gif