Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OPT1 needs LAN DNS access

    Scheduled Pinned Locked Moved General pfSense Questions
    109 Posts 5 Posters 19.6k Views 6 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L Offline
      lewis @johnpoz
      last edited by

      @johnpoz

      Drives me nuts when I see such masks on users setup, or
      even worse the /8, just like really?? WTF!!! ;)

      Yes, those are very good points.

      The reason I have 16's here and there is because I have to bring back to life a lot of used hardware. Quite often, I have no way to know what IP the device is using so I set the network to /16 and scan until I find something.

      Problem is that some of these things get left behind as I get busy moving on to the next problems going down non stop rabbit holes.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator @lewis
        last edited by

        @lewis you understand you could do a arpscan without having actually set the /16 on your device ;)

        https://linux.die.net/man/1/arp-scan

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        L 1 Reply Last reply Reply Quote 0
        • L Offline
          lewis @johnpoz
          last edited by

          @johnpoz No, I didn't know that an arp scan could do the entire /16 range if the machine it's running on is on a /24. Is that what you're saying? I'll have to look up some info.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ Offline
            johnpoz LAYER 8 Global Moderator @lewis
            last edited by

            @lewis yes arpscan can arp for any IPs regardless of what IP or mask is actually set on the interface..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            L 1 Reply Last reply Reply Quote 0
            • L Offline
              lewis @johnpoz
              last edited by

              @johnpoz Thanks very much. I'll try that right now.

              Ack!

              arp-scan 192.168.0.0/16

              It's very fast but it fails for some reason. I'll look into it.

              ERROR: failed to send packet: Resource temporarily unavailable

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ Offline
                johnpoz LAYER 8 Global Moderator @lewis
                last edited by

                @lewis you more than likely have to be root ;) or suid the command.

                Here fun stuff you can do with it, here just scanned the 10.0.0/24 space, but some device might not answer that because see how it shows 192.168.2.12 as the IP asking.

                Well you can set the source IP to be the same as the IP you asking for, this can get stuff to answer that will only answer if the source IP is on their network, or you can set it to what you want, etc..

                arp.jpg

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 1
                • L Offline
                  lewis
                  last edited by lewis

                  Very cool, thanks for sharing. I'll definitely start using this.
                  Guess I should try to find more time to play with Kali too as it's got all kinds of such things :).

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ Offline
                    johnpoz LAYER 8 Global Moderator @lewis
                    last edited by

                    @lewis so no more setting /16 on interfaces ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    L 1 Reply Last reply Reply Quote 0
                    • L Offline
                      lewis @johnpoz
                      last edited by

                      @johnpoz LOl, correct :).
                      Thanks very much for all of your input. Even if I am not able to commit it all to memory, I have these threads to come back to when I'm stuck.

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.