topic Re: Firewall is Denies Source IP's That Are Not on my network in Network Security https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923769#M24524 <P>Yes, that is my WAN interface. Is there a way to stop my router from routing other peoples traffic or is that just the nature of the router. &nbsp;I noticed that some ips have a high risk rating when I look them up. &nbsp;<span class="lia-unicode-emoji" title=":eyes:">👀</span>&nbsp;</P> Fri, 13 Sep 2019 08:35:17 GMT errMsg 2019-09-13T08:35:17Z Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923586#M24518 <P>I have been looking at the logs on my firewall and have noticed that the source IP is not always an address on my LAN.&nbsp; How is it that source IP's are not on my LAN?</P> Thu, 12 Sep 2019 21:25:56 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923586#M24518 errMsg 2019-09-12T21:25:56Z Re: Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923607#M24520 <P>Depends on what interface you looking, if you looking outside the source address can be anything,</P> <P>&nbsp;</P> <P>to give more clarity can you show us your error log to understand better, rather assuming.</P> Thu, 12 Sep 2019 22:13:14 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923607#M24520 balaji.bandi 2019-09-12T22:13:14Z Re: Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923624#M24522 <P>Here is a screenshot of the logs im seeing...i blacked out <EM>my</EM> external IP</P> Thu, 12 Sep 2019 23:08:08 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923624#M24522 errMsg 2019-09-12T23:08:08Z Re: Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923635#M24523 <P>That is normal, and it proves your FW working, dropping unnecessary traffic on the outside interface. ( correct me the IP blacked out was public IP configured outside interface ?)</P> <P>&nbsp;</P> Fri, 13 Sep 2019 00:19:02 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923635#M24523 balaji.bandi 2019-09-13T00:19:02Z Re: Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923769#M24524 <P>Yes, that is my WAN interface. Is there a way to stop my router from routing other peoples traffic or is that just the nature of the router. &nbsp;I noticed that some ips have a high risk rating when I look them up. &nbsp;<span class="lia-unicode-emoji" title=":eyes:">👀</span>&nbsp;</P> Fri, 13 Sep 2019 08:35:17 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923769#M24524 errMsg 2019-09-13T08:35:17Z Re: Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923840#M24525 <P>This is not uncommon when there are misconfigurations in the network. It could be a wrong IP-config on a PC or a wrong NAT inside the network. Or even a user willingly spoofing other addresses.</P> Fri, 13 Sep 2019 11:34:46 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923840#M24525 Karsten Iwen 2019-09-13T11:34:46Z Re: Firewall is Denies Source IP's That Are Not on my network https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923919#M24526 <P>As long you allowing right traffic and right NAT translation inside to outside and outside to inside. </P> <P>&nbsp;</P> <P>rest will be blocked. but we are not sure how your setup and configuration, i have provided input based on the screen shot</P> <P>&nbsp;</P> <P>you need more granular look you need to provide correct information of the IP and your configuration for validation.</P> Fri, 13 Sep 2019 13:31:05 GMT https://community.cisco.com/t5/network-security/firewall-is-denies-source-ip-s-that-are-not-on-my-network/m-p/3923919#M24526 balaji.bandi 2019-09-13T13:31:05Z