IP Spoof

smeren · ‎12-01-2003

Hello

I'm getting this errors in my pix anyone has an ideia what could produce this? Didn´t find any virus or trojan till the moment.

Deny IP spoof from (127.0.0.1) to 10.10.10.10 on interface outside

Thanks in advance

Sergio Meren

hando · ‎12-01-2003

Please find the following link for the explanation of the message:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63syslog/pixemsgs.htm#1052224

You may have a misconfigured client or someone is trying to spoof your network.

smeren · ‎12-02-2003

Any ideia in how to avoid this? It appears to be in my outside interface because everytime i reboot the internet router it stops for a while, 15 to 30 minutes than starts again to appear this log messages on the pix.

Thanks

mustafa.mail · ‎12-02-2003

hi,

block this loopback address 127.0.0.1 through ACL or conduit command.

Thanks,

Mustafa