Page 2 of 4 FirstFirst 1234 LastLast
Results 11 to 20 of 35
  1. #11
    Master Untangler
    Join Date
    Mar 2017
    Location
    France, Paris
    Posts
    135

    Default

    what is going on with my untangle ? do i have to be worried ????

  2. #12
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,135

    Default

    If I had sessions on my Untangle interfaces using the private IP address space (in other words, not public IP addresses) I couldn't account for, I would be worried. Those addresses are coming from somewhere, those devices exist somewhere. If you don't have two DHCP servers on your network somehow (your ISP router and Untangle, for instance), then you can't account for those addresses. I would be worried.

  3. #13
    Master Untangler
    Join Date
    Mar 2017
    Location
    France, Paris
    Posts
    135

    Default

    i am worried but i don't know what to do, except turning all off....

  4. #14
    Master Untangler
    Join Date
    Mar 2017
    Location
    France, Paris
    Posts
    135

    Default

    well
    i rebooted the untangle VM yesterday night at 11 PM
    and now....no Strange IP or Phantom IP....

    So maybe it is just a bug from the session viewer or Something ??
    i don't know....
    untangleOK.png

  5. #15
    Master Untangler cblaise's Avatar
    Join Date
    Jul 2014
    Location
    Burlington, VT
    Posts
    131

    Default

    No, the Untangle doesn't add random IP addresses to reports or monitors. All indications are that there is a machine at that address. It may not be pingable but you'll see it in the arp table.

    The next time you see that address in the session viewer, go to /admin/index.do#config/network and select your Internal interface, in the lower right-hand side, you'll see a window with the arp table entries and you should see the MAC address associated with the IP address.

  6. #16
    Master Untangler
    Join Date
    Mar 2017
    Location
    France, Paris
    Posts
    135

    Default

    I did that, and...no there were NO MAC addresses associated with the IP. The IP was not there too !

    the IP that were in the ARP table were legitimate ones (as shown in my screen captures), but no 192.168.1.7 or Strange things....
    Last edited by doudoufr; 01-26-2018 at 08:18 AM.

  7. #17
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    Do you have any port forwards? If so, what are they?

    So far I see absolutely nothing worrisome. Networks are chatty. If you run tcpdump you'll see tons of packets you don't understand. If that kind of thing alarms you the easiest solution is to not look at it.
    If you want to understand all that chatter, just start googling, but you'll want to set aside your panic and go into learning mode. There are near infinite number of things to learn about in the networking...
    Last edited by dmorris; 01-26-2018 at 09:04 AM.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  8. #18
    Master Untangler
    Join Date
    Mar 2017
    Location
    France, Paris
    Posts
    135

    Default

    what's panic me, is the Phantom IP.....or the subnet that does not exist on my network....
    i have a port forward, but only in my isp routeur and for the openvpn. That's all. (1194 i think)

  9. #19
    Master Untangler
    Join Date
    Oct 2017
    Posts
    161

    Default

    Could it be the VPN server your hiding behind? With the VPN off the server IP would not be there.

  10. #20
    Master Untangler
    Join Date
    Mar 2017
    Location
    France, Paris
    Posts
    135

    Default

    there was no vpn at that time.
    OpenVpn in untangle use an IP in 192.168.0.XX


    But...i think the stranges IP from external to external were my TV player from my ISP. When it's ON, all that stranges IP appears.

    The only ones I can't explain now...are the IP 192.168.2.88 and the 192.168.1.7....

    the IP 192.168.2.88 is still there....
    ipen2.png

    arptable.png
    Last edited by doudoufr; 01-27-2018 at 03:04 AM.

Page 2 of 4 FirstFirst 1234 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2