From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tuna.sandelman.ca (unknown [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) by huchra.bufferbloat.net (Postfix) with ESMTP id 2DF2D21F0F0 for ; Fri, 25 Jan 2013 08:23:08 -0800 (PST) Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 46FA22016D for ; Fri, 25 Jan 2013 11:28:21 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id 50C3E63765; Fri, 25 Jan 2013 11:22:11 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 3E29D636C4 for ; Fri, 25 Jan 2013 11:22:11 -0500 (EST) From: Michael Richardson To: cerowrt-devel X-Mailer: MH-E 8.3; nmh 1.3-dev; XEmacs 21.4 (patch 22) X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Sender: mcr@sandelman.ca Subject: [Cerowrt-devel] arp for 0.0.0.0 X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2013 16:23:08 -0000 So, I was tcpdump'ing on my ge00 to try and see where my bandwidth had gone, and if there was some unresolved bloat. I can tell because I stream my music from my home to my office, and it will skip if my home is screwed up. I was seeing all sorts of arp requests... basically for everything on the Internet. Weirdly, my ISP seems to proxy-arp for EVERYTHING.... what was wrong? why was I doing this. I've seen this on windows boxes when they have a network route pointing 0.0.0.0/0 to the "LAN".... but I don't have that: root@bud:~# netstat -rn Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt 0.0.0.0 209.87.254.158 0.0.0.0 UG 0 0 0 ge00 oops, wait... did I type my gateway wrong??? yes. I've pointed my gateway at myself. DAMN. that shouldn't have worked at all!!! I'm just posting this as a huh. It also seems that there is no control to keep dnsmasq from answering on my ge00. I guess some trojans try to use me for DOS amplication by asking for isc.org continuously?