Firewall logs wan source ip 0.0.0.0 blocked

[johnpoz]

Agreed when did I say any different? My point was before APIPA then the device would of used 0.0.0.0 if it didn't get an address from dhcp vs the client using a 169.254 address

[badgast]

A time ago I had the same issue, never found out what was causing it, but after a while it went away, never to be seen again... Sorry for a useless answer ;-)

[emammadov]

I usually have this issue, haven't found what causing it yet.

[johnpoz]

What is the mac address of this 0.0.0.0 icmp packet?

[emammadov]

How can I find mac address of 0.0.0.0?

[johnpoz]

sniff/packet capture on your wan... Open the capture in wireshark.

Or just run a tcpdump with -e should also show it.

Looks like your seeing them every few seconds so you sniff should only need to be very short.