Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ULA network sending DHCP requests to my WAN?

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 504 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I Offline
      ismaelz
      last edited by

      Hi there,

      Can there be a legitimate reason for the following spam? My pfsense router is directly connected to the ISP modem - and my internal network is 192.168.0.0/24

      Please see attached screenshot
      Capture.PNG
      Capture.PNG_thumb

      1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator
        last edited by

        That looks to be coming from you ISP..

        Its not unheard of to see dhcp requests on your wan.. since this could be a shared layer 2 for all the customers in the area.  So depending on how your isp is setup sure you could see such traffic.  It would be best and they can stop it from being sent to you.  So you have a MODEM, and you sure its not a router?  What is the make and model of it?  What IP is on your pfsense wan - is it public?

        You for sure don't need to log it though ;)

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 25.07.1 | Lab VMs 2.8.1, 25.07.1

        1 Reply Last reply Reply Quote 0
        • I Offline
          ismaelz
          last edited by

          @johnpoz:

          That looks to be coming from you ISP..

          Its not unheard of to see dhcp requests on your wan.. since this could be a shared layer 2 for all the customers in the area.  So depending on how your isp is setup sure you could see such traffic.  It would be best and they can stop it from being sent to you.  So you have a MODEM, and you sure its not a router?  What is the make and model of it?  What IP is on your pfsense wan - is it public?

          You for sure don't need to log it though ;)

          Thanks for the reply Johnpoz,

          The modem is indeed a modem/router combo (Arris brand) that is set to be in bridge mode so that I can use pfSense instead of their terrible user interface and feature set. The IP on the pfSense WAN is my public statically assigned IP

          I'll go ahead and remove logging. Just got alarmed by all the alerts and started expecting something worse from within my own network.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.