I get these when a laptop connected to Telewest Broadband (via DCHP), then connected to our LAN (also by DCHP). I fixed this by setting the lease time to 8 hours.
It's not perfect, but it reduced the spoof alarms. Lee. -----Original Message----- From: M Pilletere [mailto:[EMAIL PROTECTED]] Sent: 15 May 2002 15:26 To: [EMAIL PROTECTED] Subject: [gb-users] Problem with spoofing alarms Hi, I have been getting tons of this type message over past 2 weeks. Prior I only got 1 or 2 a month. None or most of the addresses are not on my network nor my ISPs. Any insight would be helpful. Mike ALARM NO: 1 DATE: Wed 2002-05-15 10:12:47 EDT INTERFACE: PSN (fxp2) INTERFACE TYPE: Private service network (PSN) ALARM TYPE: Possible spoof IP PACKET: TCP [208.61.162.43/6346]-->[213.121.89.86/39932] l=0 f=0x14 [adsl-61-162-43.mco.bellsouth.net/6346]-->[host213-121-89-86.in-addr.btopenw orld.com/39932] DETAILED DESCRIPTION: Return interface for IP packet is different than arrival. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
