DNS
|
Internet-----Firewall---switch-----CPE-----(MPLS VPN)
My problem is that on the customer firewall we see packets coming from other networks.
How come ? MPLS is supposed to be secure
------------------------------
Packet Warning: Packet (9.17.X.6X->9.133.X.X: Protocol=TCP[RST] Port 1533->1156) for interface 192.168.X.X was
routed to interface ?? -- bogus destination address?
---------------------------------
Jan 08 14:28:31.165 srvhkkling kernel[0]: 343 Packet Warning: Packet (9.69.X.X->9.133.104.74: Protocol=TCP[RST] Port 1352->1455) for interface 192.168.X.Xwas routed to interface ?? -- bogus destination address?
------------------------
Customer doesn't have network within 9.X.X.X range
According to the customer packets don't come from the internet side but the VPN MPLS side.
Has some already heard of that security problem and how to solve it ?
