ip address on lan getting hijacked

chris dunn chris at dunnz.org
Sat May 31 15:54:30 UTC 2008


On Sat May 31 2008 11:13:24  SYNass IT Ubuntu / Linux wrote:

> >> chris dunn wrote:
> >>> My home lan is set up based upon a Linksys wireless access point and
> >>> router which has an address of 192.168.1.1.
> >>
> >>> All works well until 9.30 a.m. every morning when 192.168.1.2 is taken
> >>> down and reset to 192.168.1.100, apparently by dhclient accessing the
> >>> dhcp server running on the wap.
> >>

> If the computer is set up to use static addressing...it shouldn't be
> running a dhclient.
>
> There should be two ways I know of this happening...1, the computer is
> set to dynamic addressing and by "static" someone is defining it as an
> entry in the DHCP server to assign the same address to a particular MAC
> every time, which isn't static addressing, or 2, the computer has
> something, a script, running at that time that resets the network to
> another config.
>
> What's in your (and root's) crontab at that time?

Thanks to all for the interesting responses on this.

I've taken out dhclient (which took out dhcdbd with it) as I can't see any 
need for it.

For the moment I'll wait until 9.30 a.m. tomorrow to see whether this alone is 
enough to resolve the issue.

In view of the large input I'll post back again to report on progress.

To those suggesting a change to dhcp from static addresses, I don't think this 
is a workable option for me, unless maybe going into the router and linking 
machine names to the mac addresses is the way to go. I need to know the 
addresses of the machines on the lan.


-- 
Chris Dunn




More information about the ubuntu-users mailing list