I have been getting a lof of errors in my event log with some ip addresses that do not belong to my network:
169.254.X.X
when i type in fw tab -t host_table > lichost.txt
I can see that the src ip is 169.254.X.X and destination to somewhere on the internet.
Any idea of what and where this ip address is coming from?
I have seen this address block before (it's reserved by IANA for use with link local networks) and it was related to a NT RAS. People would dial into the RAS and the server would use DHCP to assign them an address in this range. Sometimes this address would leak into the network.
-- Joe
