Re: [FW-1] FW-1 too many internal hosts detected

["David A. Gianna" <DGianna@FW1-NOSPAMWESTCON.COM>]

I've seen this before -- last time it was a misconfigured switch connected to
the firewall, and the packets were bouncing back and forth.
This made it LOOK like double IP addresses, even though they didn't exist. Check
the switch and the router!



Dave Gianna, MS, CCSE, CCSI, NSA, ACE/ADM
Technical Sales Engineer
Security Technologies GroupWestcon, Inc. <http://www.westcon.com/online/>
520 White Plains Road
Tarrytown, NY 10591

====================================================
"It's time to reach the goals we set for ourselves"
                       -- Trevor Rabin/Jon Anderson
====================================================




|--------+----------------------->
|        |          Beatriz Tapia|
|        |          L

ópez        |
|        |          <btl@TID.ES> |
|        |                       |
|        |          01/17/02     |
|        |          03:48 AM     |
|        |          Please       |
|        |          respond to   |
|        |          Mailing list |
|        |          for          |
|        |          discussion of|
|        |          Firewall-1   |
|        |                       |
|--------+----------------------->
  >----------------------------------------------------------------------------|
  |                                                                            |
  |       To:     FW-1-MAILINGLIST@beethoven.us.checkpoint.com                 |
  |       cc:     (bcc: David Gianna/Westchester/Westcon/US/WestconGroup)      |
  |       Subject:     [FW-1] FW-1 too many internal hosts detected            |
  >----------------------------------------------------------------------------|




Sometimes we get this message and after that a list of those hosts detected. The
problem is that some of these addresses are repeated. They are the same but
written from right to left. For example, the address 195.10.32.1 would be
written in that message first like 195.10.32.1 and then like 1.32.10.195. Does
anyone know if this is usual? Why does it happen?

Thanks very much!!

Sometimes we get this message and after that a list of those hosts detected. The problem is that some of these addresses are repeated. They are the same but written from right to left. For example, the address 195.10.32.1 would be written in that message first like 195.10.32.1 and then like 1.32.10.195. Does anyone know if this is usual? Why does it happen?

 

Thanks very much!!