Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    ULA network sending DHCP requests to my WAN?

    Firewalling
    2
    3
    326
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      ismaelz last edited by

      Hi there,

      Can there be a legitimate reason for the following spam? My pfsense router is directly connected to the ISP modem - and my internal network is 192.168.0.0/24

      Please see attached screenshot

      1 Reply Last reply Reply Quote 0
      • johnpoz
        johnpoz LAYER 8 Global Moderator last edited by

        That looks to be coming from you ISP..

        Its not unheard of to see dhcp requests on your wan.. since this could be a shared layer 2 for all the customers in the area.  So depending on how your isp is setup sure you could see such traffic.  It would be best and they can stop it from being sent to you.  So you have a MODEM, and you sure its not a router?  What is the make and model of it?  What IP is on your pfsense wan - is it public?

        You for sure don't need to log it though ;)

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

        1 Reply Last reply Reply Quote 0
        • I
          ismaelz last edited by

          @johnpoz:

          That looks to be coming from you ISP..

          Its not unheard of to see dhcp requests on your wan.. since this could be a shared layer 2 for all the customers in the area.  So depending on how your isp is setup sure you could see such traffic.  It would be best and they can stop it from being sent to you.  So you have a MODEM, and you sure its not a router?  What is the make and model of it?  What IP is on your pfsense wan - is it public?

          You for sure don't need to log it though ;)

          Thanks for the reply Johnpoz,

          The modem is indeed a modem/router combo (Arris brand) that is set to be in bridge mode so that I can use pfSense instead of their terrible user interface and feature set. The IP on the pfSense WAN is my public statically assigned IP

          I'll go ahead and remove logging. Just got alarmed by all the alerts and started expecting something worse from within my own network.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post