On 05/06/2012 02:33 PM, Doug Lytle wrote:
imnotpc wrote:
May 5 08:42:38 Cedar1 kernel: [2420746.469695] ll header:
00:11:09:01:8f:2b:00:18:4d:9d:dc:39:08:00
May 5 08:42:38 Cedar1 kernel: [2420746.470060] martian source
173.194.74.154 from 192.168.3.2, on dev eth0
Host shows:
host 173.194.74.154
154.74.194.173.in-addr.arpa domain name pointer qe-in-f154.1e100.net
If you plug in a machine (Or device) that has an ip address that
doesn't match your network, you'll get martian source notices.
What is the function of the machine that logging this?
Doug
The boxes logging these entries are firewall/routers, each on the edge
of a DMZ and a LAN. The entries don't match the subnet of any of the
local networks. Wired connections are closely monitored, but wireless
device access is more lenient.
Jeff
