Page 1 of 1

ip conflicting

Posted: Tue Feb 26, 2008 3:18 am
by sarthor
Salam O Alykum.
i have 4 internet cafes, 40 clients each cafe, that have ip conflicting problem,
i have checked with dynamic as well as manual ip setting, same problem,
now i am assigning 2 gateway to my client, but still same.
some of client computer shows the message of "ip conflict", At the time of appearing of this massage,i use to checked from different softwares,(netcut, ipscanner etc) that 2nd ip also assigned that pc, and the ip is shown of my server ip,
like in net netcut during scanning i can see like


192.168.0.20 -- 00:22:22:22:33:20 -- pc20
192.168.0.21 -- 00:22:22:22:33:2c -- pc21
192.168.0.22|192.168.0.1 -- 00:22:22:22:33:2a -- pc22
192.168.0.23 -- 00:22:22:22:33:dd -- pc23


my server is on ubuntu 7.04 server, Using squid, iptables, shaper and dhcp.
on the infected computer consol when i type ipconfig /all, so there is not ip like 192.168.0.1

several of my clients assigning my linux ip (which is the gateway for clients) #to their self,
is it a virus??
i need help for this solution.
its confirm that there is no ip confliction in real, means no misconfiguration in real. mean to say i did not have taken any mistake to put 2 ips in my network,

my dhcpd.conf is here
---------------
# A slightly different configuration for an internal subnet.
subnet 192.168.2.0 netmask 255.255.255.0 {
range 192.168.2.40 192.168.2.200;
option domain-name-servers 192.168.2.1, 212.118.133.101;
# option domain-name "internal.example.org";
option routers 192.168.2.1;
# option broadcast-address 10.5.5.31;
default-lease-time 6000;
max-lease-time 72000;
}
---------------------

Salam O Alykum!!

Posted: Tue Feb 26, 2008 9:39 am
by x2oxen
the computers which gets conflicts if windows based then go to event viewer and see with which mac address they getting conflicted and if linux based then check your logs. And by finding specific computers you will be more nearer to the problem and will solve that easily by examining those.

Posted: Tue Feb 26, 2008 11:46 am
by AcidEYE
As Salam U Alikum,

Dear sarthor,

your systems are infected by malware/torjan, it could be rising.exe, anyway. download Combofix and any Virus Removal Tool
you can download Combofix from this link http://download.bleepingcomputer.com/sUBs/ComboFix.exe
i was also facing that same problem in my network, after this virus removal tool my problem is gone. if you want all tools message me with your email id, i will email them to you.

i hope this will also help you out.

thanks & regards.

Posted: Tue Feb 26, 2008 12:21 pm
by lambda
i'm sorry, but i have to ask: why do you use windows on the cafe machines?

Posted: Tue Feb 26, 2008 7:36 pm
by sarthor
lambda wrote:i'm sorry, but i have to ask: why do you use windows on the cafe machines?


Salam O alykum,

because the owner want to use xp on clients computer, i am just a consultant there, what do you like to install on client computer, i dont know, But i will wish to install ubuntu gutsy on Clients computer, but i cant!

I will check that fix today, and will also upload the screen shots of my infected clients some where on the internet,

the clients conflicting with Linux Server lan ip.

Salam O Alykum!