Doesnt matter which section they join though if they are on or appear to be on the local network. The real question is why they are comming through on a local IP address. What is the device emulated or physical at 192.168.1.1. Is it a router doing some weird NAT or is it some kind of software...