The traffic is arriving at the GNAT Box on the PSN Interface. Either one of your machines on the PSN is using an IP Address that does not belong on the PSN, or else you are "sharing" a physical network between two or more "logical" networks.
Mike Burden Lynk Systems http://www.lynk.com (616)532-4985 [EMAIL PROTECTED] > -----Original Message----- > From: M Pilletere [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, May 15, 2002 10:26 AM > To: [EMAIL PROTECTED] > Subject: [gb-users] Problem with spoofing alarms > > > Hi, > I have been getting tons of this type message over past 2 > weeks. Prior I > only got 1 or 2 a month. None or most of the addresses are not on my > network nor my ISPs. Any insight would be helpful. > > Mike > > ALARM NO: 1 > > DATE: Wed 2002-05-15 10:12:47 EDT > INTERFACE: PSN (fxp2) > INTERFACE TYPE: Private service network (PSN) > ALARM TYPE: Possible spoof > IP PACKET: TCP [208.61.162.43/6346]-->[213.121.89.86/39932] l=0 > f=0x14 > > [adsl-61-162-43.mco.bellsouth.net/6346]-->[host213-121-89-86.i > n-addr.btopenw > orld.com/39932] > DETAILED DESCRIPTION: > Return interface for IP packet is different than arrival. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > To subscribe to the digest version first unsubscribe, then > e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > Archive of the last 1000 messages: > http://www.mail-archive.com/[email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
