Re: Issues with ARP notification on latest CVS of wackamole

Theo Schlossnagle <[email protected]> Tue, 13 Apr 2004 08:34:36 -0400
Newsgroups gmane.comp.apache.mod-wackamole.general
Message-ID <[email protected]>
On Apr 12, 2004, at 1:37 PM, Jay West wrote:
> So we put in the latest CVS and still have the problem it appears. If 
> we
> fail all machines in the cluster, when they come back up outside 
> references
> to those machines hit the cisco pix, and the pix has the arp entries 
> for
> those IP's on the wrong (old) machines. We can immediately fix this 
> problem
> by doing a "clear arp" on the cisco pix. However, I don't think this 
> is a
> pix issue.

I think it is the PIX not allowing arp-spoofing -- it is a firewall 
after all :-)

Perhaps the ARP reply packets need to be addressed specifically to the 
PIX's MAC address.  I looked through the documentation, but I don't see 
anything that mentions how to send unsolicited ARP replies to a PIX.  
Any insight would be appreciated.  Whatever it is, I am sure it is a 
simple software fix.

// Theo Schlossnagle
// Principal Engineer -- http://www.omniti.com/~jesus/
// Postal Engine -- http://www.postalengine.com/
// Ecelerity: fastest MTA on Earth