ULA network sending DHCP requests to my WAN?



  • Hi there,

    Can there be a legitimate reason for the following spam? My pfsense router is directly connected to the ISP modem - and my internal network is 192.168.0.0/24

    Please see attached screenshot


  • Rebel Alliance Global Moderator

    That looks to be coming from you ISP..

    Its not unheard of to see dhcp requests on your wan.. since this could be a shared layer 2 for all the customers in the area.  So depending on how your isp is setup sure you could see such traffic.  It would be best and they can stop it from being sent to you.  So you have a MODEM, and you sure its not a router?  What is the make and model of it?  What IP is on your pfsense wan - is it public?

    You for sure don't need to log it though ;)



  • @johnpoz:

    That looks to be coming from you ISP..

    Its not unheard of to see dhcp requests on your wan.. since this could be a shared layer 2 for all the customers in the area.  So depending on how your isp is setup sure you could see such traffic.  It would be best and they can stop it from being sent to you.  So you have a MODEM, and you sure its not a router?  What is the make and model of it?  What IP is on your pfsense wan - is it public?

    You for sure don't need to log it though ;)

    Thanks for the reply Johnpoz,

    The modem is indeed a modem/router combo (Arris brand) that is set to be in bridge mode so that I can use pfSense instead of their terrible user interface and feature set. The IP on the pfSense WAN is my public statically assigned IP

    I'll go ahead and remove logging. Just got alarmed by all the alerts and started expecting something worse from within my own network.