Re: IP address reconfig for no known reason

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I will give this a try when I get into work tomorrow, as VPN doen't want to
let me in - it's been one of those weeks!! If you have any other ideas,
please let me know. Thanks very much for your help so far
--
Mad PC Guy


"/kj" wrote:

> You might want to verify you only opened the port you intended.
>
> Really you need to find out where the DHCP server is (ip address) and how
> it's getting into your network(tracert).
>
> /kj
>
> "Mad_PC_Guy" <MadPCGuy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:3CCC3DC7-0B1A-4D56-B878-B8518A04AA7A@xxxxxxxxxxxxxxxx
> >I recently opened an SSL port i think it a SSL, as I was tryin to create
> > another internal website, apart from that I can't really think what I
> > might
> > of inadvertatnly done apart, install a few system components, in IIS -
> > could
> > that possibly be causing it?
> > --
> > Mad PC Guy
> >
> >
> > "/kj" wrote:
> >
> >> More likely DHCP "leaking' into the network. Such an overt change
> >> wouldn't
> >> be in a hackers profile.
> >>
> >> What recent changes have been made to the network / firewall / wireless ?
> >>
> >>
> >> /kj
> >> "Mad_PC_Guy" <MadPCGuy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> news:734CB0BD-0663-4344-82FC-A1C32DAB697B@xxxxxxxxxxxxxxxx
> >> > Is it possible if a port has been opened that some how someone is
> >> > getting
> >> > into the network, somehow bypasing the firewall - if they were geting
> >> > in
> >> > could they be sending out a different set of ip address and in turn
> >> > causeing
> >> > this?
> >> > --
> >> > Mad PC Guy
> >> >
> >> >
> >> > "/kj" wrote:
> >> >
> >> >> Go to a workstation getting incorrect address.
> >> >>
> >> >> Open command prompt, type "ipconfig/all"
> >> >>
> >> >> Examine the appropriate field for "DHCP Server" If it's not your SBS
> >> >> server
> >> >> then you have some tracking to do.
> >> >>
> >> >> ---------
> >> >>
> >> >> DHCP Server . . . . . . . . . . . : 192.168.253.71
> >> >> DNS Servers . . . . . . . . . . . : 192.168.253.71
> >> >> ---------
> >> >>
> >> >> /kj
> >> >>
> >> >>
> >> >>
> >> >> "Mad_PC_Guy" <MadPCGuy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> >> news:D8C5922A-D3B7-468C-9D39-5C34F3FB58DC@xxxxxxxxxxxxxxxx
> >> >> > The strange thing is that when i went in to check if it was running
> >> >> > it
> >> >> > said
> >> >> > it was, I rescently some IIS commonets to improve VPN security, eg
> >> >> > certification to stop hackin into VPN, which it wanted some IIS
> >> >> > stuff
> >> >> > installed as well - could that have anything to do with it?
> >> >> >
> >> >> > The only DCHP server that I know of that is on the network is the
> >> >> > one
> >> >> > on
> >> >> > the
> >> >> > server, unless it is possible to have twwo running at once, and the
> >> >> > second
> >> >> > not showing on the DCHP menu?
> >> >> > --
> >> >> > Mad PC Guy
> >> >> >
> >> >> >
> >> >> > "AllenM" wrote:
> >> >> >
> >> >> >> Sounds like to me you are having network connectivity isues. Your
> >> >> >> clients
> >> >> >> are not talking to your DHCP server. Have you checked the server to
> >> >> >> ensure
> >> >> >> the DHCP service is running?
> >> >> >>
> >> >> >> "Mad_PC_Guy" <MadPCGuy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> >> >> news:CFFB81C7-7A8F-4031-8421-EF63562D23C0@xxxxxxxxxxxxxxxx
> >> >> >> > Ye, the only problem is that the IP addresses that are being
> >> >> >> > reassigned
> >> >> >> > aren't part of the same work group the origonal adresses are
> >> >> >> > similar
> >> >> >> > to
> >> >> >> > 192.168.0.*, but they are being changed to 254.124.0.*, or
> >> >> >> > something
> >> >> >> > similar
> >> >> >> > to that, I can manually put the IP address in but as you said
> >> >> >> > they
> >> >> >> > change
> >> >> >> > automatically, and I don't want to have to go round and manually
> >> >> >> > change
> >> >> >> > them,
> >> >> >> > after they've been changed
> >> >> >> > --
> >> >> >> > Mad PC Guy
> >> >> >> >
> >> >> >> >
> >> >> >> > "AllenM" wrote:
> >> >> >> >
> >> >> >> >> If your using DHCP (which in a small environment such as your
> >> >> >> >> you
> >> >> >> >> should
> >> >> >> >> be)
> >> >> >> >> then yes clients will renew their IP addresses from the DGHCP
> >> >> >> >> server
> >> >> >> >> every 8
> >> >> >> >> days by default. You should have a range of IP's that need to be
> >> >> >> >> excluded
> >> >> >> >> from the DHCP pool for hardware devices such as routers,
> >> >> >> >> switches,
> >> >> >> >> servers
> >> >> >> >> and printers. Normally people exclude the first 15 addresses
> >> >> >> >> 0-15
> >> >> >> >> which
> >> >> >> >> should be than enough for you.
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Mad_PC_Guy" <MadPCGuy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> >> >> >> >> message
> >> >> >> >> news:384ABB69-E767-48B2-AF42-5CEB893A5932@xxxxxxxxxxxxxxxx
> >> >> >> >> >I manage a small network (15 PC's, and a server (SBS 2003), for
> >> >> >> >> >some
> >> >> >> >> >reason
> >> >> >> >> > as of yesterday (23/01/06), clients have just started changing
> >> >> >> >> > the
> >> >> >> >> > IP
> >> >> >> >> > addresses for no aperent reason, I can solve this by manually
> >> >> >> >> > asigning
> >> >> >> >> > the
> >> >> >> >> > IP
> >> >> >> >> > address to the individual computer, which isn't too bad. but
> >> >> >> >> > i'm
> >> >> >> >> > more
> >> >> >> >> > concerned if it trys to reassign one of our neetwork printers
> >> >> >> >> > IP
> >> >> >> >> > addresses
> >> >> >> >> > and we can no longer print to it, can some please help, as I
> >> >> >> >> > have
> >> >> >> >> > completely
> >> >> >> >> > run out of ideas, as there are no errors/problems in the Event
> >> >> >> >> > Viewer
> >> >> >> >> > of
> >> >> >> >> > either the Server or the client, i noticed though when I went
> >> >> >> >> > into
> >> >> >> >> > the
> >> >> >> >> > DHCP
> >> >> >> >> > menu in admin tools, taht the computer affected had an I over
> >> >> >> >> > the
> >> >> >> >> > icon,
> >> >> >> >> > I
> >> >> >> >> > can't seem to work out what this means. It seems to spread
> >> >> >> >> > similar
> >> >> >> >> > to a
> >> >> >> >> > virus, however I've got up-to-date AV protection on all
> >> >> >> >> > machines
> >> >> >> >> > +
> >> >> >> >> > firewalls,
> >> >> >> >> > so I don't believe that it is a virus. Any and all help would
> >> >> >> >> > be
> >> >> >> >> > greatly
> >> >> >> >> > appreciated, cheers.
> >> >> >> >> > --
> >> >> >> >> > Mad PC Guy
> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: Linux / Windows Tightvnc Problem
    ... A partner has tightvnc on Windows 2000. ... >>We're coupled through a VPN, so we appear to be on a local network. ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
    (comp.os.linux.networking)
  • Re: VPN from Linux client into Windows network
    ... > I can establish a VPN tunnel to the VPN server on the Windows network side. ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
    (comp.os.linux.networking)
  • Re: IP address reconfig for no known reason
    ... I recently opened an SSL port i think it a SSL, as I was tryin to create ... another internal website, apart from that I can't really think what I might ... > More likely DHCP "leaking' into the network. ... >> Mad PC Guy ...
    (microsoft.public.windows.server.sbs)
  • VPN connection
    ... download & it makes me mad because it was fine before. ... >I usually use MS VPN under XP. ... >Installation under win2000 does not contain such problem. ... >I am not sure that this patch affects my VPN connection ...
    (microsoft.public.windowsxp.perform_maintain)