martian source ... cant connect to network

I've a very strange problem when trying to connect to a
cable-modem/network with my laptop.

With a ubuntu-based machine the connection is absolutely no problem. I
simply set the correct hw-adress (the modem authenticates the client via
its mac-adress) and then run a dhcp-client and within a second the
connection is established.

When trying the same on my laptop (opensuse 10.0) I dont get a
dhcp-lease but myriads of the following in my kernel-log:

Apr 21 19:31:09 polar kernel: martian source 255.255.255.255 from
10.34.115.65, on dev eth1
Apr 21 19:31:09 polar kernel: ll header:
ff:ff:ff:ff:ff:ff:00:01:5c:22:78:84:08:00
Apr 21 19:31:13 polar kernel: printk: 7 messages suppressed.

Also when I manually assign the correct ip to the interface (same
netmask, broadcast, route as on the working ubuntu-machine) I dont get a
connection but the above messages.

Strange thing is, that the correct ip is a public 84.xx.xx.xx-adress and
not a private 10.x.x.x-adress like in the "martian-source"-logs.

I disabled the firewall but the message is coming directly from kernel.

any idea?

thnx,
peter

On Sun, 23 Apr 2006, in the Usenet newsgroup comp.os.linux.networking, in
article <444bf0ed$0$567$(E-Mail Removed)>, peter pilsl wrote:

>I've a very strange problem when trying to connect to a
>cable-modem/network with my laptop.

Nope! Very, very common.

>With a ubuntu-based machine the connection is absolutely no problem. I
>simply set the correct hw-adress (the modem authenticates the client via
>its mac-adress) and then run a dhcp-client and within a second the
>connection is established.

record the /sbin/ifconfig output - noting that MAC address

>When trying the same on my laptop (opensuse 10.0) I dont get a
>dhcp-lease but myriads of the following in my kernel-log:

But is the hardware address in the laptop being changed?

>Apr 21 19:31:09 polar kernel: ll header:
>ff:ff:ff:ff:ff:ff:00:01:5c:22:78:84:08:00

ff:ff:ff:ff:ff:ff (to) Ethernet broadcast
00:01:5c:22:78:84 (from) this MAC
08:00 (type IP datagram)

[compton ~]$ etherwhois 00:01:5c
00-01-5C (hex) CADANT INC.
00015C (base 16) CADANT INC.
4343 Commerce Court - Ste. #207
Lisle IL 60532
UNITED STATES
[compton ~]$

Never heard of them - but there are 9000 OUI allocation in the IEEE database.

>Strange thing is, that the correct ip is a public 84.xx.xx.xx-adress and
>not a private 10.x.x.x-adress like in the "martian-source"-logs.

You ISP is using 10.0.0.0/8 for non-public customer services. See it all
the time.

>I disabled the firewall but the message is coming directly from kernel.

Yup. The kernel sees those addresses before the firewall does.

>any idea?

Verify that your lap-doggy will let you change the MAC address - not all
network drivers accept that. If necessary, reset the cable-modem. A google
search will tell how (generally, power it down for 10-20 seconds).

Old guy