Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 651 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Never Ending IP Spoofing

E. Winkler
Hello all,

The Astaro firewall is working great but 3 days ago for some odd reason this is showing up in the Packet Filter Live Log is shows this.

10.0.75.239 11001  ->  255.255.255.255 11001 UDP IP SPOOFING
SRC HW ff:ff:ff:ff:ff:ff:00
DST HW 40:95:11:4f:90:08:00 

My firewall has 2 nic, one with real static IP and the other with dot 75 network.  The dot 75 is behind the firewall on private switch.  There is no IP address which the log is listing.   Another thing also we noticed is that the response on the firewall is horribly slow, 100 IMAP users are trying to map to the mail server and the firewall is making it very slow ... up to 30 seconds of delay.

Any ideas ?


This thread was automatically locked due to age.
  • 0
    Hi,

    Are you sure that you're nicks are not connected to the same physical network/equipements?...

    Or may be some stations with more than one nick on both IP networks on the same switch/HUB.

    Take a carefully look.
Unfiltered HTML