ip spoofing problem (ip 0.0.0.0.)

geminni · 11-02-2006, 02:31 PM

helloo,

i have a problem i would like to find a solution for so any help is appriciated.
i am using modem and router for internet connection, i used smac 2 software to spoof mac address, it worked for like 5 times, to assign different mac address, but then it couldnt assign ip address to modem, i get aquiring ip address and then all it shows as IP is 0.0.0.0.0. tried to restart computer, modem, but no effect. what shall i do. when i used ipconfig /release it says it has already been release but when i use ipconfig /renew it goes to timed out, connection lost to DHCP server or something like that

thanks in advance

**johnwill** · 11-02-2006, 02:55 PM

Well, this is not a spoofing issue.

Normally, an IP address of all zeros shows up if a duplicate IP address is detected on the network, a defective NIC, or bad or corrupted drivers. Start eliminating those possibilities.

geminni · 11-03-2006, 01:46 AM

thanks for input, but im sort of newbie to this things, how shall i do it ( defective NIC or bad or corrupted drivers, solving the problem ) ?
thanks and sorry for inconvenience.

**Fr4665** · 11-03-2006, 03:04 AM

take out the nic but a new one in. find a computer with the ip your trying to assign in your network. reinstall the drivers for the nic

crazijoe · 11-03-2006, 06:41 AM

If this is a broadband connection, the MAC address of the modem is registered with your ISP. If you change it, your ISP may not issue it an IP because it is not in their system.

**johnwill** · 11-03-2006, 07:42 AM

If the DHCP didn't issue an address, the AIPA address of 169.254.x.x would have been assigned. This is either a conflict or some configuration/hardware issue.

crazijoe · 11-03-2006, 07:52 AM

Quote:

Originally Posted by johnwill

If the DHCP didn't issue an address, the AIPA address of 169.254.x.x would have been assigned. This is either a conflict or some configuration/hardware issue.

Did he change the MAC address of the modem? If this was the case, the ISP wouldn't give him a IP.

Quote:

Originally Posted by geminni

but then it couldnt assign ip address to modem

Am I reading this correctly?

geminni · 11-05-2006, 06:30 AM

i changed the ip address of modem, it worked for a few times, but then when i tried to change it again , i received the 0.0.0.0.0. ip. then after a few days i used the SMAC 2 software again and it worked but again only for like 2 tries, following with 0.0.0.0.0 ip.

crazijoe · 11-06-2006, 05:17 AM

What type of internet connection do you have? (Cable, DSL, phone) Are you changing the MAC address of the modem?

geminni · 11-06-2006, 08:03 AM

Quote:

Originally Posted by crazijoe

What type of internet connection do you have? (Cable, DSL, phone) Are you changing the MAC address of the modem?

cable, yes i am changing mac of modem

crazijoe · 11-06-2006, 12:17 PM

Yea.. I don't thisnk that's going to work. You may need to contact your ISP with the new MAC address you gave the modem.

geminni · 11-07-2006, 03:09 AM

my bad, the physical mac address is not changed, i was only spoofing the mac of modem, to get different IPs.

crazijoe · 11-07-2006, 08:19 AM

When you spoof the MAC address of the modem you are spoofing the physical MAC address of it. The ISP will only see the MAC address that you spoof because it replaced the physical MAC on the modem.

geminni · 11-07-2006, 12:34 PM

ok, let me see if i get this right. i can onlyy get assigned ips that my provider accepts, right, that is probably the reason why i get 0.0.0.0.0 ip error, because when i used for example mac's that started with 00-50-..... i sometimes did get assigned ip, sometimes not, so my question is this:
can i somehow find out what range of mac addresses my provider accepts?

thanks

crazijoe · 11-07-2006, 12:36 PM

You would have to contact your ISP for that type of information.

levi.rogers · 11-09-2006, 10:36 AM

The DSLAM that you cable provider uses assigns an ip to a specific MAC addy. When the tech takes the modem out to the user it is usually(not always) assigned per customer by MACC addy. When you are spoofing your MACC your ISP is seeing you as essentially a foreign object on there network and than they do not provide you with an IP.

Another thing I think that you are being confused by MACC and IP these two numbers are different.

Again -- if you are behind a router your router can provide you with multiple IP addy's your ISP provided modem does not need to do this. If your ISP provided modem is also a router than you should be able to login to said modem and select a DHCP range to allow for your LAN.

One thing that could also be possible as I have ran into this myself....

Certain ISP's assign a username and password to your modem, when your modem contacts the ISP to resolve the IP addy it checks the modem against this username and password if it doesn't authenticate it can't resolve an IP addy(essentially the request is denied). This can also cause your firewall(if you have one) to report attempted IP spoofs on incoming traffic. This happens because the firewall is seeing an attempt to link up with your network from IP 0.0.0.0..

One more thing? Why do you need to spoof your macc addy?

crazijoe · 11-09-2006, 12:08 PM

Quote:

Originally Posted by levi.rogers

One more thing? Why do you need to spoof your macc addy?

Excellent question.

geminni · 11-09-2006, 12:17 PM

thanks for all the answers... it helped as i have found out what certain mac adresses are accepted by my cable provider...

**johnwill** · 11-12-2006, 03:43 PM

Probably because they're registered as valid modems, that's how most cable ISP's control access to the network.

11-02-2006, 02:31 PM	#1 (permalink)
geminni Registered User Join Date: Nov 2006 Posts: 11 OS: xp sp2	ip spoofing problem (ip 0.0.0.0.) helloo, i have a problem i would like to find a solution for so any help is appriciated. i am using modem and router for internet connection, i used smac 2 software to spoof mac address, it worked for like 5 times, to assign different mac address, but then it couldnt assign ip address to modem, i get aquiring ip address and then all it shows as IP is 0.0.0.0.0. tried to restart computer, modem, but no effect. what shall i do. when i used ipconfig /release it says it has already been release but when i use ipconfig /renew it goes to timed out, connection lost to DHCP server or something like that thanks in advance

11-02-2006, 02:55 PM	#2 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,774 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Well, this is not a spoofing issue. Normally, an IP address of all zeros shows up if a duplicate IP address is detected on the network, a defective NIC, or bad or corrupted drivers. Start eliminating those possibilities. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

11-03-2006, 01:46 AM	#3 (permalink)
geminni Registered User Join Date: Nov 2006 Posts: 11 OS: xp sp2	thanks for input, but im sort of newbie to this things, how shall i do it ( defective NIC or bad or corrupted drivers, solving the problem ) ? thanks and sorry for inconvenience. Last edited by geminni; 11-03-2006 at 01:48 AM.

11-03-2006, 03:04 AM	#4 (permalink)
Fr4665 aka mr.fraggs Join Date: Nov 2004 Location: USA or Germany Posts: 2,965 OS: Win XP,Vista,Android My System	take out the nic but a new one in. find a computer with the ip your trying to assign in your network. reinstall the drivers for the nic __________________ I don't subscribe to threads please PM me if i miss a reply. ------- Everest SensorView Pro DriverCleaner how to fix your game

11-03-2006, 06:41 AM	#5 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	If this is a broadband connection, the MAC address of the modem is registered with your ISP. If you change it, your ISP may not issue it an IP because it is not in their system. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

11-03-2006, 07:42 AM	#6 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,774 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	If the DHCP didn't issue an address, the AIPA address of 169.254.x.x would have been assigned. This is either a conflict or some configuration/hardware issue. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

11-05-2006, 06:30 AM	#8 (permalink)
geminni Registered User Join Date: Nov 2006 Posts: 11 OS: xp sp2	i changed the ip address of modem, it worked for a few times, but then when i tried to change it again , i received the 0.0.0.0.0. ip. then after a few days i used the SMAC 2 software again and it worked but again only for like 2 tries, following with 0.0.0.0.0 ip.

11-06-2006, 05:17 AM	#9 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	What type of internet connection do you have? (Cable, DSL, phone) Are you changing the MAC address of the modem? __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

11-06-2006, 12:17 PM	#11 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	Yea.. I don't thisnk that's going to work. You may need to contact your ISP with the new MAC address you gave the modem. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

11-07-2006, 03:09 AM	#12 (permalink)
geminni Registered User Join Date: Nov 2006 Posts: 11 OS: xp sp2	my bad, the physical mac address is not changed, i was only spoofing the mac of modem, to get different IPs.

11-07-2006, 08:19 AM	#13 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	When you spoof the MAC address of the modem you are spoofing the physical MAC address of it. The ISP will only see the MAC address that you spoof because it replaced the physical MAC on the modem. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

11-07-2006, 12:34 PM	#14 (permalink)
geminni Registered User Join Date: Nov 2006 Posts: 11 OS: xp sp2	ok, let me see if i get this right. i can onlyy get assigned ips that my provider accepts, right, that is probably the reason why i get 0.0.0.0.0 ip error, because when i used for example mac's that started with 00-50-..... i sometimes did get assigned ip, sometimes not, so my question is this: can i somehow find out what range of mac addresses my provider accepts? thanks

11-07-2006, 12:36 PM	#15 (permalink)
crazijoe Registered User Join Date: Oct 2004 Location: Omaha, The Center of the Universe Posts: 7,632 OS: WinXP, Win2K3 My System	You would have to contact your ISP for that type of information. __________________ Microsoft MCSA + Messaging, MVP, A+, Network+ http://i16.photobucket.com/albums/b3...other/Help.jpg Do you want a real Republican? HDD diagnostic tools / HDD data recovery software

11-09-2006, 10:36 AM	#16 (permalink)
levi.rogers Registered User Join Date: Jun 2006 Location: Mid-West Posts: 111 OS: WinXP Pro	My 2 cents The DSLAM that you cable provider uses assigns an ip to a specific MAC addy. When the tech takes the modem out to the user it is usually(not always) assigned per customer by MACC addy. When you are spoofing your MACC your ISP is seeing you as essentially a foreign object on there network and than they do not provide you with an IP. Another thing I think that you are being confused by MACC and IP these two numbers are different. Again -- if you are behind a router your router can provide you with multiple IP addy's your ISP provided modem does not need to do this. If your ISP provided modem is also a router than you should be able to login to said modem and select a DHCP range to allow for your LAN. One thing that could also be possible as I have ran into this myself.... Certain ISP's assign a username and password to your modem, when your modem contacts the ISP to resolve the IP addy it checks the modem against this username and password if it doesn't authenticate it can't resolve an IP addy(essentially the request is denied). This can also cause your firewall(if you have one) to report attempted IP spoofs on incoming traffic. This happens because the firewall is seeing an attempt to link up with your network from IP 0.0.0.0.. One more thing? Why do you need to spoof your macc addy?

11-09-2006, 12:17 PM	#18 (permalink)
geminni Registered User Join Date: Nov 2006 Posts: 11 OS: xp sp2	thanks for all the answers... it helped as i have found out what certain mac adresses are accepted by my cable provider...

11-12-2006, 03:43 PM	#19 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,774 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Probably because they're registered as valid modems, that's how most cable ISP's control access to the network. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience