Odd ARP entry

[Jeffrey Ross]

looking at the arp table on my system I see that I have one entry that 
shouldn't be there -

proxy10.fedoraproject.org (209.132.181.15) at 50:3d:e5:f5:b6:c0 [ether] 
on enp0s25

First, the subnet this machine lives on is 172.18.19.0/24 and all of the 
other arp entries are correct as they are for hosts on my subnet.  The 
MAC address listed for "proxy10.fedoraproject..." is my router which 
tells me that my router is supplying a proxy-arp response which I'm ok 
with, at least for now.

So my questions are -
1) Why is this fedora system not following the routing table to reach 
209.132.181.15, there is no route other than default that would match 
this network
2) More importantly why is this machine trying to reach 
proxy10.fedoraproject.org ???  (currently there are no open sessions to 
this destination)

System is Fedora 28 with all the latest updates, and I have no 
recollection of ever configuring a fedoraproject proxy.

Jeff

[Ed Greshko]

On 07/20/18 21:19, Jeffrey Ross wrote:
>  looking at the arp table on my system I see that I have one entry
> that shouldn't be
>  there -
>
>  proxy10.fedoraproject.org (209.132.181.15) at 50:3d:e5:f5:b6:c0 [ether] on enp0s25
>
>  First, the subnet this machine lives on is 172.18.19.0/24 and all of the other arp
>  entries are correct as they are for hosts on my subnet.  The MAC address listed for
>  "proxy10.fedoraproject..." is my router which tells me that my router is
> supplying
>  a proxy-arp response which I'm ok with, at least for now.
>
>  So my questions are -
>  1) Why is this fedora system not following the routing table to reach
>  209.132.181.15, there is no route other than default that would match this network
>  2) More importantly why is this machine trying to reach proxy10.fedoraproject.org
>  ???  (currently there are no open sessions to this destination)
>
>  System is Fedora 28 with all the latest updates, and I have no recollection of ever
>  configuring a fedoraproject proxy. 
Partial answer due to the late hour here.

You probably have NetworkManager-config-connectivity-fedora installed which will
connect with http://fedoraproject.org/ on a periodic basis.

209.132.181.15 is an IP address associated with fedoraproject.org

[root@meimei conf.d]# host 209.132.181.15
15.181.132.209.in-addr.arpa domain name pointer proxy10.fedoraproject.org.

and

root@meimei conf.d]# host fedoraproject.org
fedoraproject.org has address 140.211.169.196
fedoraproject.org has address 67.219.144.68
fedoraproject.org has address 8.43.85.67
fedoraproject.org has address 152.19.134.142
fedoraproject.org has address 152.19.134.198
fedoraproject.org has address 140.211.169.206
fedoraproject.org has address 185.141.165.254
fedoraproject.org has address 209.132.181.16
fedoraproject.org has address 209.132.181.15
fedoraproject.org has address 209.132.190.2
fedoraproject.org has IPv6 address 2605:bc80:3010:600:dead:beef:cafe:fed9
fedoraproject.org has IPv6 address 2610:28:3090:3001:dead:beef:cafe:fed3
fedoraproject.org has IPv6 address 2604:1580:fe00:0:dead:beef:cafe:fed1
fedoraproject.org mail is handled by 20 mx2.redhat.com.
fedoraproject.org mail is handled by 10 mx1.redhat.com.

-- 
Conjecture is just a conclusion based on incomplete information. It isn't a fact.

[Jeffrey Ross]

On 07/20/2018 10:51 AM, Ed Greshko wrote:
>  On 07/20/18 21:19, Jeffrey Ross wrote:
> > looking at the arp table on my system I see that I have one entry that shouldn't
> be
> > there -
> >
> > proxy10.fedoraproject.org (209.132.181.15) at 50:3d:e5:f5:b6:c0 [ether] on enp0s25
> >
> > First, the subnet this machine lives on is 172.18.19.0/24 and all of the other arp
> > entries are correct as they are for hosts on my subnet.  The MAC address listed for
> > "proxy10.fedoraproject..." is my router which tells me that my router is
> supplying
> > a proxy-arp response which I'm ok with, at least for now.
> >
> > So my questions are -
> > 1) Why is this fedora system not following the routing table to reach
> > 209.132.181.15, there is no route other than default that would match this network
> > 2) More importantly why is this machine trying to reach proxy10.fedoraproject.org
> > ???  (currently there are no open sessions to this destination)
> >
> > System is Fedora 28 with all the latest updates, and I have no recollection of ever
> > configuring a fedoraproject proxy.
>  Partial answer due to the late hour here.
>
>  You probably have NetworkManager-config-connectivity-fedora installed which will
>  connect with http://fedoraproject.org/ on a periodic basis.
>
>  209.132.181.15 is an IP address associated with fedoraproject.org
>
>  [root@meimei conf.d]# host 209.132.181.15
>  15.181.132.209.in-addr.arpa domain name pointer proxy10.fedoraproject.org.
>
>  and
>
>  root@meimei conf.d]# host fedoraproject.org
>  fedoraproject.org has address 140.211.169.196
>  fedoraproject.org has address 67.219.144.68
>  fedoraproject.org has address 8.43.85.67
>  fedoraproject.org has address 152.19.134.142
>  fedoraproject.org has address 152.19.134.198
>  fedoraproject.org has address 140.211.169.206
>  fedoraproject.org has address 185.141.165.254
>  fedoraproject.org has address 209.132.181.16
>  fedoraproject.org has address 209.132.181.15
>  fedoraproject.org has address 209.132.190.2
>  fedoraproject.org has IPv6 address 2605:bc80:3010:600:dead:beef:cafe:fed9
>  fedoraproject.org has IPv6 address 2610:28:3090:3001:dead:beef:cafe:fed3
>  fedoraproject.org has IPv6 address 2604:1580:fe00:0:dead:beef:cafe:fed1
>  fedoraproject.org mail is handled by 20 mx2.redhat.com.
>  fedoraproject.org mail is handled by 10 mx1.redhat.com.
>  
I did find the DNS entry for proxy10 being associated with 
http://fedoraproject.org, however the only problem is I should NEVER see 
an arp entry for an IP address not on my subnet

and obviously 209.132.181.15 is not on my subnet of 172.18.19.0/24.

so the original question remains, why am I seeing an ARP entry for an IP 
address not on my subnet.

second, somewhat new question, how do I stop networkmanager from polling 
fedora project?

Jeff

[Fred Smith]

On Sat, Jul 21, 2018 at 02:19:27PM -0400, Jeffrey Ross wrote:
>  
>  
>  On 07/20/2018 10:51 AM, Ed Greshko wrote:
>  >On 07/20/18 21:19, Jeffrey Ross wrote:
>  >>looking at the arp table on my system I see that I have one entry that
> shouldn't be
>  >>there -
>  >>
>  >>proxy10.fedoraproject.org (209.132.181.15) at 50:3d:e5:f5:b6:c0 [ether] on
> enp0s25
>  >>
>  >>First, the subnet this machine lives on is 172.18.19.0/24 and all of the other
> arp
>  >>entries are correct as they are for hosts on my subnet.  The MAC address listed
> for
>  >>"proxy10.fedoraproject..." is my router which tells me that my router
> is supplying
>  >>a proxy-arp response which I'm ok with, at least for now.
>  >>
>  >>So my questions are -
>  >>1) Why is this fedora system not following the routing table to reach
>  >>209.132.181.15, there is no route other than default that would match this
> network
>  >>2) More importantly why is this machine trying to reach
> proxy10.fedoraproject.org
>  >>???  (currently there are no open sessions to this destination)
>  >>
>  >>System is Fedora 28 with all the latest updates, and I have no recollection of
> ever
>  >>configuring a fedoraproject proxy.
>  >Partial answer due to the late hour here.
>  >
>  >You probably have NetworkManager-config-connectivity-fedora installed which will
>  >connect with http://fedoraproject.org/ on a periodic basis.
>  >
>  >209.132.181.15 is an IP address associated with fedoraproject.org
>  >
>  >[root@meimei conf.d]# host 209.132.181.15
>  >15.181.132.209.in-addr.arpa domain name pointer proxy10.fedoraproject.org.
>  >
>  >and
>  >
>  >root@meimei conf.d]# host fedoraproject.org
>  >fedoraproject.org has address 140.211.169.196
>  >fedoraproject.org has address 67.219.144.68
>  >fedoraproject.org has address 8.43.85.67
>  >fedoraproject.org has address 152.19.134.142
>  >fedoraproject.org has address 152.19.134.198
>  >fedoraproject.org has address 140.211.169.206
>  >fedoraproject.org has address 185.141.165.254
>  >fedoraproject.org has address 209.132.181.16
>  >fedoraproject.org has address 209.132.181.15
>  >fedoraproject.org has address 209.132.190.2
>  >fedoraproject.org has IPv6 address 2605:bc80:3010:600:dead:beef:cafe:fed9
>  >fedoraproject.org has IPv6 address 2610:28:3090:3001:dead:beef:cafe:fed3
>  >fedoraproject.org has IPv6 address 2604:1580:fe00:0:dead:beef:cafe:fed1
>  >fedoraproject.org mail is handled by 20 mx2.redhat.com.
>  >fedoraproject.org mail is handled by 10 mx1.redhat.com.
>  >
>  I did find the DNS entry for proxy10 being associated with
>  http://fedoraproject.org, however the only problem is I should NEVER
>  see an arp entry for an IP address not on my subnet
>  
>  and obviously 209.132.181.15 is not on my subnet of 172.18.19.0/24.
>  
>  so the original question remains, why am I seeing an ARP entry for
>  an IP address not on my subnet.
>  
>  second, somewhat new question, how do I stop networkmanager from
>  polling fedora project? 
A totally wild guess would be to uninstall NetworkManager-config-connectivity-fedora.

Fred

-- 
---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us -----------------------------
                    The Lord detests the way of the wicked 
                  but he loves those who pursue righteousness.
----------------------------- Proverbs 15:9 (niv) -----------------------------

[Ed Greshko]

On 07/22/18 02:19, Jeffrey Ross wrote:
>  I did find the DNS entry for proxy10 being associated with
>  http://fedoraproject.org, however the only problem is I should NEVER see an arp
>  entry for an IP address not on my subnet
>
>  and obviously 209.132.181.15 is not on my subnet of 172.18.19.0/24.
>
>  so the original question remains, why am I seeing an ARP entry for an IP address
>  not on my subnet.
>
>  second, somewhat new question, how do I stop networkmanager from polling fedora
>  project? 

Yes, it is odd to have an ARP entry for an IP address not on the local network.  No
idea how that happened.

Yes, just "dnf erase NetworkManager-config-connectivity-fedora".  I always do
that as
I personally don't find it very useful.

-- 
Conjecture is just a conclusion based on incomplete information. It isn't a fact.