topic IP Source Spoofing signature? in Network Security https://community.cisco.com/t5/network-security/ip-source-spoofing-signature/m-p/1734532#M56264 <P>I am trying to find a signature that will tell my IPS to notify me when it sees any IP source address come from the network behind my IPS that was not in that subnet range.&nbsp; Is there an existing signature I may have looked over in my IPS or has anyone created a custom IPS signature I can use?</P> Sun, 10 Mar 2019 12:28:35 GMT jnlawrence76 2019-03-10T12:28:35Z IP Source Spoofing signature? https://community.cisco.com/t5/network-security/ip-source-spoofing-signature/m-p/1734532#M56264 <P>I am trying to find a signature that will tell my IPS to notify me when it sees any IP source address come from the network behind my IPS that was not in that subnet range.&nbsp; Is there an existing signature I may have looked over in my IPS or has anyone created a custom IPS signature I can use?</P> Sun, 10 Mar 2019 12:28:35 GMT https://community.cisco.com/t5/network-security/ip-source-spoofing-signature/m-p/1734532#M56264 jnlawrence76 2019-03-10T12:28:35Z IP Source Spoofing signature? https://community.cisco.com/t5/network-security/ip-source-spoofing-signature/m-p/1734533#M56265 <HTML><HEAD></HEAD><BODY><P>Hi Jeremy</P><P></P><P>We can't really release a generic "Spoof" signature since it depends on the network you're on what's a spoof and what not. That being said, signature 1104-0 may be of interest to you. Have a look, and maybe clone and edit it for your needs.</P><P></P><P>Martin</P><P>IPS Signature Team</P></BODY></HTML> Thu, 15 Sep 2011 09:46:09 GMT https://community.cisco.com/t5/network-security/ip-source-spoofing-signature/m-p/1734533#M56265 mzeiser 2011-09-15T09:46:09Z