error messages in syslog after upgrade

[n.phipps]

Hi

I recently upgraded my PIX from 6.1.4 to 6.3.3.

Ever since then Ive been getting these messages:-

%PIX-3-106011: Deny inbound (No xlate) tcp src inside:192.168.0.112/721 dst inside:192.168.1.1/515

The bizzare thing is that the 2 hosts are on the private side of our firewall so Im at a loss as to why the pix is even seeing this traffic. A wee network diagram is:

Pix--192.168.0.0/24 net--router--192.168.1.0/24 net

Any suggestions?

thanks

Norman

[paddyxdoyle]

Is the PIX your clients default gateway on the 192.168.0.0 network.

It could be responing to an arp request for 192.168.1.1 as it has proxy arp running. Try turning proxy arp off using "sysopt noproxyarp inside" and see if you get the same message in the logs

Rgds

Paddy

[n.phipps]

Hi

fixed it. The server was a NT print server with a secondary gateway enabled. The secondary gateway was the pix inside interface. Ive removed the pix as a 2nd default gate And the messages no longer appear.