I’ve sent the workaround to my colleagues; we’ll see if it works for us as well.
Daniele_Sunrise
D k109 doesn’t use ESET; it was on my end that I encountered this error. Dk109 found, using Wireshark, that the box was responding with two MAC addresses, so it makes sense to me that ESET is returning a spoofing error. I’ve temporarily added an exception for the IP 192.168.1.1, but that’s not ideal.
Looking at the post on the ESET forum, it seems that users have a Virgin Media Hub5x, which appears to be the same as the Connect Box 3 Fiber used by Sunrise.
Could a potential Sagemcom firmware update include a feature that triggers ARP spoofing detection? Have you had any configuration rollouts or updates in the last few days or weeks for this type of equipment?
This seems to be limited to this type of box. At home, I have a Sunrise DSL line with a different type of box and I don’t have the issue.
