RE: [gb-users] DNS anomolies

[Dan Swartzendruber]

At 08:46 AM 12/9/2002 -0700, Wes Stewart wrote:

I tried applying all of the suggestions from last week and I am still
getting this alarm.  Neither of these addresses are on my LAN.

      ALARM NO: 4
          DATE: Mon 2002-12-09 08:38:19
     INTERFACE: PROTECTED (xl1)
INTERFACE TYPE: Protected
    ALARM TYPE: Possible spoof
     IP PACKET: UDP  [169.254.78.209/137]-->[199.191.128.104/53]  l=52

isn't the 169 address what windows (98 for sure) assigns when a dhcp request fails?

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
http://www.mail-archive.com/gb-users@gta.com