You say nothing
about _how_ you set up the anti-spoofing.
If you search the
list archive at (for instance)
you will find
numerous messages that explain
the basic
anti-spoofing settings.
They
are:
Internal IF 1:
This Net
Internal IF 2: This
Net
etc
....
DMZ: This Net
External IF:
Others
If you use NAT, you
must create a group consisting of each interface's network,
plus any NAT addresses that may apply to that interface, and
insert
that groups as valid
addresses in the anti-spoofing settings.
Cheers,
Anders
:)
Hi!
I am testing NG. If I enable the Anti-spoofing
protection the firewall drops pings from machines in one interface to another.
I saw in the logs that it was because of spoofing but I was not doing
spoofing. Why is this happenning? Any idea of how to enable Anti-spoofing
protection and not having this problem?
Thanks very much,
Beatriz
|