|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] "Private" IP addresses
Exploit? That's normal Windows behavior. Which side of your FW are you seeing the traffic originate from? Internally? You could have improperly configured hosts with static addresses or a DHCP server handing out bad leases. Externally? Someone could have dropped a couple of improperly configured clients on the edge of your network (someone failed to configure IDS sensors and forgot about them maybe?) or possibly someone is attempting to spoof traffic (although why anyone would spoof NB traffic is beyond me) which you really should kill at your edge router. My advice would be to look for a couple of rogue clients. Sniff the network segment the traffic is originating from, grab their MAC addresses and compare them to any asset list you (should) maintain and then contact their owners. Chris -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Tuesday, February 12, 2002 3:57 PM To: [email protected] Subject: [FW-1] "Private" IP addresses I am noticing an increasing amount of nddatagrams and nbname requests on my firewall(s) coming from 192.168.100 to 102 addresses and asking for teh broadcast; 192.168.100.255. Is anyone else getting the same? Is there a new exploit? Cheers -- __________________________________________________________________ Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/ Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/ ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
