TomatoUSB

Tomato's View Details page: UDP, Source 255.255.255.255, S Port 68, Destination 7.5.72.1, D Port 67

From what I have read, this has to do with DHCP.

However, I am confused about the Destination "7.5.72.1" which is apparently the Department of Defence !

Anyone know what is happening here?

Thanks,
Bruce

Port 67 Bootps
Port 68 Bootpc

Here is a link where people are talking about this subject.
bootps

Thank you waeking,

I figured it was DHCP. However, the address 7.5.72.1 is still a mystery.

Do you think my ISP is using a US Department of Defence address internally in its network instead of an RCF1918 address?

NetRange: 7.0.0.0 - 7.255.255.255
NetName: DISANET7
OrgName: DoD Network Information Center
OrgId: DNIC

Just curious :-)

Thanks for any help!
Bruce

Are you running an anonymous bot doing take down attacks?

Did u find out what this is?

I have the same connection…except mine is from 7.52.236.1…also registered with the DoD.

Looks like there is an iptables rule that allows this traffic on port 67/68

22 7810 logaccept udp — * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68

??

I just stumbled on this thread. I see traffic on my home LAN using 7.37.148.1:67, which also seems to map to the DoD. Any clues?

Steve

Originally, ports 67,68 (UDP) are computers sending DHCP request to router or network server to receive an IP address in that network. Where 255 represents the network and 0 the requesting machine. You might be concerned about hack attacks unless you set your home network to 7.255.255.255. By design, no network is forbidden because once you go to your ISP server, all PCs on your internal network will share the same ISP given IP (ex. 64.75.134.55). Rules made by the FCC and obeyed by some router vendors are both unconstitutional and serve no purpose, other than expose individuals to easier hacking & spying by government and corporations, both foreign & domestic.