cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


521
Views
0
Helpful
2
Replies
Highlighted
Beginner

Problem 106001 Asa5510

Hello all,

I have some problems on my network (invisible printers, unable to access to the server for a short time...) so i decided to look to the log entries on my Asa 5510.

Surprise since my problems started i receive this type of message (severity = 2 Critical) :

106001 Inbound TCP connection denied from 10.65.10.X/56478 to 10.65.10.30/139 flags PSH ACK  on interface inside

106001 Inbound TCP connection denied from 10.65.10.X/56478 to 10.65.10.30/139 flags ACK  on interface inside

106001 Inbound TCP connection denied from 10.65.10.X/56483 to 10.65.10.30/139 flags SYN  on interface inside

106006 Deny inbound UDP from 10.65.10.254/137 to 10.65.10.30/137 on interface inside

The only ACL on this interface is Any to any IP+DNS+ICMP = permit and the implicit any to any ip = deny

Does that look weird to you? Is there something to do to correct these problems?

Many Thanks,

P.S. : 10.65.10.30 is my server. 10.65.10.X = any IP adress on the network. 10.65.10.254 is one of the printer

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Beginner

Re:Problem 106001 Asa5510

The IP's are on the same subnet?!

So the question is why the asa can see the traffic.

Do you have Proxy arp enabled on inside Interface? If yes Check your Nat statements

Sent from Cisco Technical Support Android App

2 REPLIES 2
Beginner

Re:Problem 106001 Asa5510

The IP's are on the same subnet?!

So the question is why the asa can see the traffic.

Do you have Proxy arp enabled on inside Interface? If yes Check your Nat statements

Sent from Cisco Technical Support Android App

Beginner

Re:Problem 106001 Asa5510

Impresive !

I disabled proxy arp (don't even know why he was there...) and everything worked fine. No more messages in logs and now every connection with printer work perfectly.

Thank you very much Frederic !