Static ip settings don't work anymore

Discussion in 'privacy problems' started by white31, Dec 2, 2016.

  1. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    Don't think very important to you but static ip settings don't work anymore for me, I mean in local area connection in order to disable dhcp. This happened after my isp changed their infrastructure. Now if I disable dhcp and write addresses manually, internet connection is lost. I just wonder what they did...
     
    Last edited: Dec 2, 2016
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Please say more about your setup.
     
  3. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    Just a single desktop PC with windows directly connected to internet cable (no router/WI-FI). I always had dhcp disabled and assigned static IP/Mac, now I can't do the same if I want to have internet. They changed their equipment and told me that I can't use that setup anymore.
     
  4. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,390
    What happens if you re-enable dhcp? Also, what does your ISP recommend you do?

    -- Tom
     
  5. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    Enabling dhcp and "obtain an IP address automatically" returns internet connection back. They recommend automatic setup, but as I already said this wasn't necessary before.
     
  6. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,390
    So, if I read your reply correctly, you are now using dhcp to be able to post here, eh? Smart move, otherwise, you wouldn't be able to post!

    Chalk it up to changes by the ISP, and being able to get your Internet back by adapting to the change.

    -- Tom
     
  7. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    You really don't want to be doing that. You want a router between you and your ISP, which can do at least NAT firewall. And better, iptables or pf firewall.
     
  8. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    I'm sorry mirimir if I'm not such knowledgeable IT as you are but isn't a system more vulnerable with router/WiFi than without it? but I don't want to debate this, I just wondered if someone knew that what has been changed that static setup don't work and dhcp is necessarily to be on.
    Thanks.
     
  9. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Using WiFi introduces vulnerabilities, yes. But it's pretty standard practice to have a firewall device between computers and the Internet. If you have tight firewall rules -- and in particular, don't allow incoming connections on any ports -- you're probably OK. But even so, it's an extra layer of protection. And if it's a different OS, such as *BSD (e.g., pfSense) there's less chance of shared vulnerabilities. Also, if you're using Windows, you definitely don't want to run without a hardware firewall.
     
  10. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    For more info: there is 255.255.255.255 ff-ff-ff-ff-ff-ff static arp in my cmd. This ought to be internet TV or like that but I'm not sure, maybe its not!? before it wasn't there. I delete it but after restarting it reappears again, dunno how to block it. Adding this that dhcp thing which needs to obtain something (which I don't know what is) automatically and also I sense more lags on the websites loading...I don't know, I'm just comparing things.
     
  11. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    Have your tried simply allowing DHCP to assign you an IP Address, and then use ipconfig /all in a command prompt to see all the values assigned. Then take a screen shot of ipconfig /all before setting up your static IP address again as a guide for all the values like DNS etc.. That might reveal what the ISP has changed, or if something in your local settings has changed.
     
  12. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    Yes, I have written down all the values before and now and also remember all of them. They changed my IP and gateway Mac, other values are the same, and of course I entered them carefully in appropriate fields.
     
  13. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,976
    Probably they changed/upgraded their hardware and now enabled DCHP Snooping with IP Source Guard.
    https://bdwyertech.net/2016/03/02/s...ip-source-guard-and-dynamic-arp-inspection-2/

    Panagiotis
     
  14. Stefan Froberg

    Stefan Froberg Registered Member

    Joined:
    Jul 30, 2014
    Posts:
    747
    No. 255.255.255.255 is IP broadcast address. And ff:ff:ff:ff:ff:ff is a a MAC broadcast address.
    You had most probably IP binding working previously. That is, you got certain static IP address for certain MAC address that you device has.
     
  15. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    pandlouk
    if this is true there is nothing I can do to counter this, right? I read your link and just understood that that might be for increased security from ISP side, but with this can they also snoop my passwords and web browsing without even requiring dns requests if you could tell?

    Stefan Froberg
    if I understood correctly and it's some device on my PC, is there a way to find it? although after switching to dhcp now I see that on every startup svchost wants to connect to 255.255.255.255 udp port boot(67), if I block it I lose internet connection. Could this be my Network Card address maybe? when I had static values svchost wasn't connecting that.

    Another note: after their equipment change my local area connection name has changed to Network 2 (the name along the bench image). If I delete this profile from registry it still reappears after restarting, must be windows has some association with it because on clean install it has default - "Network" name.
     
    Last edited: Dec 4, 2016
  16. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,976
    Correct, if you disable dhcp or use static ip you won't connect.
    The ISPs can view passwords,web browsing and everything you type if the connection is not secured (https).
    For viewing your passwords, etc. on https they would have to use "https snooping" (with man in the middle attack or by inject malicious adds in the initial page) which are illegal.

    Panagiotis
     
  17. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    It's all right, I think I got worried for nothing. I always was on static addresses and forgot how things work normally, now that this has changed and all this new connections appeared, I got confused a bit. Still don't like this but I should leave this as is.
    I appreciate if there will be more suggestions, so far I thank to everyone who replied and helped me.
     
  18. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    3,440
    Location:
    Slovakia
    Have you also used custom DNS servers? Does your IP changes? Do you loose connection ASAP when setting up static IP or after some time?
    MS did the same stupid change, you can not download Windows Updates without DHCP service since Windows 8.1. It is hard to track people without it.
     
  19. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,976
    You are welcome.

    about the network name
    Open your registry with regedit, go to
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Nla\Cache\Intranet]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\Unmanaged]

    and delete the registry keys in these locations

    reboot your system and windows will recreate a profile as it does with a new installation

    Panagiotis
     
  20. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    Yes, I did custom dns.
    If you mean if my IP changes often by my Isp, then no, only when a port in their switch dies or in situations like this.
    Yes, the connection is lost instantly when I set static, though when I was "investigating" it remained some time (I mean with static and dhcp turned off) and only then got lost, such behavior happened 2-3 times for a short interval. I don't know why.
    I didn't know if Windows 8 needed dhcp too, interesting, although with release of update rollups there is not much difference now are you on Win 8 or on Seven IMO.
     
  21. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    Just to make for me clear, you mean to delete whole folder to the left side in regedit like: Intranet, Profiles and Unmanaged?
     
  22. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,976
    You delete the registry keys like those highlighted with yellow

    01.JPG

    Panagiotis
     
  23. Stefan Froberg

    Stefan Froberg Registered Member

    Joined:
    Jul 30, 2014
    Posts:
    747
    Now that you have to use dhcp it's perfectly normal that your machine tries to connect to 255.255.255.255 broadcast address. That's the way dhcp will discover closest dhcp server (hopefully, your operators) and that in turn gives you a dynamic, most likely private IP address.

    For more info how dhcp operates and especially the dhcp discovery see:
    https://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Protocol#DHCP_discovery

    If you want to know what your machine network card MAC address is then, like Cutting_Edgetech mentioned, give ipconfig /all command. Altought it won't matter now anymore now that you have to use dhcp for connecting.

    Unless you were running some public server (like www-server) from your home, you really don't need public static IP address. And like mirimir mentioned, you always want to have router with firewall/NAT capability if you have static public IP address. Otherwise you are just begging for being hacked.

    But now you should be much safer, because now, besides giving you dynamic IP address with dhcp, you should now also be behind NAT that your operator should have setup for you.

    EDIT: dhcp or no dhcp, adding somekind of firewall does not hurt ;)
     
  24. white31

    white31 Registered Member

    Joined:
    Apr 8, 2014
    Posts:
    40
    pandlouk
    I deleted those keys (didn't touch "Intranet" because there wasn't anything inside it) and the default profile name is back :). Still not sure but surfing awhile seems to eliminate increased lag which I mentioned above, must be new profile was somewhat messy. Kindly thank you again for this.

    Stefan Froberg
    I will watch from now on if my IP will change (become dynamic), although WhatsMyIp.com says it's static, interesting how they do determine that.
    As for firewalls, I use software based one.
     
  25. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,976
    You 're welcome.:)

    Panagiotis
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.