Unwanted DHCP Clients Requests ISC-DHCP-SERVER

Fri May 17 16:29:16 UTC 2013

Thanks Sten Carlsen

it is actually ISP setup, traffic for other network pass through our
network. i need to investigate further, according to your advices.

Thanks / Regards
>
> On 17/05/13 18:03, Prabhpal S. Mavi wrote:
>> Dear DHCP Gurus
>>
>> i have full of log with unwanted dhcp client requests that i don't
>> suppose
>> to receive. i applied following solution but did not help. anyone have
>> idea to stop them ?
>>
>>
>> subnet 192.168.3.0 netmask 255.255.255.0 {
>> range 192.168.3.100;
> Note this range has ONE address. And it is not the one in your log below.
>> ignore booting;
>> }
>> subnet 192.168.4.0 netmask 255.255.255.0 {
>> range 192.168.4.100;
> Note this range has ONE address.
>> ignore booting;
>> }
>>
>>
>> i have thousands of this requests.
> You may try to chase down the NIC with MAC - 00:16:44:63:4b:e1to see
> what it is and what is wrong with it.
> If this is not the only one, you may look for a rogue DHCP server or as
> mentioned by Steven a leak in your networks.
>
> Whatever it is, you need to fix it in the network.
>>
>> May 17 15:58:18 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:18 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:21 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:21 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:22 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:22 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:22 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:22 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:23 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:23 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:26 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:26 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:26 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:26 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:29 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:58:29 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:58:59 captive dhcpd: DHCPREQUEST for 192.168.4.87 from
>> 7c:11:be:63:32:d2 via eth0: wrong network.
>> May 17 15:58:59 captive dhcpd: DHCPNAK on 192.168.4.87 to
>> 7c:11:be:63:32:d2 via eth0
>> May 17 15:59:01 captive dhcpd: DHCPREQUEST for 192.168.4.87
>> (192.168.3.133) from 7c:11:be:63:32:d2 via eth0: wrong network.
>> May 17 15:59:01 captive dhcpd: DHCPNAK on 192.168.4.87 to
>> 7c:11:be:63:32:d2 via eth0
>> May 17 15:59:26 captive dhcpd: DHCPREQUEST for 192.168.4.235
>> (192.168.3.133) from 00:16:44:63:4b:e1 via eth0: wrong network.
>> May 17 15:59:26 captive dhcpd: DHCPNAK on 192.168.4.235 to
>> 00:16:44:63:4b:e1 via eth0
>> May 17 15:59:32 captive dhcpd: DHCPINFORM from 192.168.4.235 via eth0
>> May 17 15:59:32 captive dhcpd: DHCPACK to 192.168.4.235
>> (00:16:44:63:4b:e1) via eth0
>>
>> Thanks
>>
>>
>>
>>
>>
>> _______________________________________________
>> dhcp-users mailing list
>> dhcp-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/dhcp-users
>
> --
> Best regards
>
> Sten Carlsen
>
> No improvements come from shouting:
>
>        "MALE BOVINE MANURE!!!"
>
> _______________________________________________
> dhcp-users mailing list
> dhcp-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dhcp-users