NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] local interface address spoofing



Hi all,

maybe someone can explain to me what this log entry mean.

I have a lot of log entries like this

Action: drop
Service:        diverse port higher than 1023
Source: 255.255.255.255
Dest:           IP of internal Server
Proto:  ICMP
Rule:           0
S_Port: 769
Info:           reason: local interface address spoofing

Many thanks to all who give a explanation.


Maybe someone know how to disable logging if it isn't any security problem (I think these entries mean any worse regarding security, but I act on instinct).

Yours Sincerely / Mit freundlichen Gruessen
Martin Bergs

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.