Patrick, I am seeing an identical problem on one of my networks. The only difference is that the source is 223.1.1.128 and a non-existent address.
Just to confirm that this was a spoofed address, I configured a host on my network with 223.1.1.1 and tried pinging 223.1.1.128. I thought if I get a response, then it's a misconfigured device, if not response then it would be a spoofed ip. I put a sniffer on it and I'm seeing multiple MAC addresses as the source of 223.1.1.128. Have you been ablet o track this any further on your network? Robert ""Patrick Ramsey"" wrote in message news:[EMAIL PROTECTED]... > Ok guys/gals, > > Tell me what you make of this. I am getting > "deny inbound (no xlate) udp src inside 10.6.0.66 /137 dst inside > 10.6.0.3/137" > > This network does nto exist anywhere on our wan. How can it possibly be > routed through our network and ended up on the inside interface of the pix > without being on a valid layer 3 network? Even if the source is spoofed, > the destination doesn't exist either! Any clues? > > -Patrick Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=23554&t=23554 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]