Howie Hamlin wrote: > > 01/03/2005 08:18:39.224 - IP spoof detected - Source:10.10.10.51, 137, > DMZ - Destination:209.177.0.5, 137, WAN - MAC address: 00.0B.DB.91.0C.01 > > This seems to indicate that a server received a request from an > external source (209.177.0.5) and tried to reply on the DMZ port > (which is correct) but used a source address of 10.10.10.51 which is > not correct.
I agree with that conclusion. Can you post (or mail) the "ipconfig /all" output and the "route print" output of the machine with the 10.10.10.51 IP address? Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Sams Teach Yourself Regular Expressions in 10 Minutes by Ben Forta http://www.houseoffusion.com/banners/view.cfm?bannerid=40 Message: http://www.houseoffusion.com/lists.cfm/link=i:5:141538 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54