Re: [bitfolk] Domain Registrars (.uk)

Top Page

Reply to this message
Author: ed
Date: 2011-02-18 21:01 -000
To: users
Old-Topics: [bitfolk] VPS still sending packets from 212.13.195.254
New-Topics: Re: [bitfolk] VPS still sending packets from 212.13.195.254
Subject: Re: [bitfolk] Domain Registrars (.uk)
Hi Michael,

On Tue, Jan 31, 2012 at 04:01:08PM -0600, Michael Corliss wrote:
> After making sure that my VPS is receiving packets on the right address,
> I'm now getting warnings that it's sending on the old address.


I had a look at what was caught for you and it was just 9 packets,
split between source port 443 and source port 53. Probably just
scans.

So I wouldn't be too concerned.

> To my knowledge I don't have any software installed for which I
> needed to specify the VPS' IP, so my guess is that this will end
> when I remove the old address from network/interfaces. Is that
> right?


You will definitely not be able to send packets from an IP address
you have removed¹. ;)

> Is there a way to test before deleting the old IP?


# tcpdump -vpni eth0 'src net 212.13.194.0/23 and not arp'

will show you any traffic going in or out of your eth0 that has a
source address inside 212.13.194.0/23 and is not ARP traffic.

Cheers,
Andy

¹ OK yeah barring some crafty thing you do to generate such traffic.


From andyjpb@??? Tue Jan 31 23:16:07 2012
Received: from pavilion.ashurst.eu.org ([212.13.194.45])
    by mail.bitfolk.com with esmtps (TLS1.0:RSA_AES_2