This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.002]Spoofed packets

Hi,
why does the UTM see devices on my second address on one external interface as spoofed packets?
I have a modem that requests ntp from the external interface additional address.


19:49:47 Spoofed packet UDP 10.99.99.250 : 3072 → 10.99.99.1 : 123 len=76 ttl=64 tos=0x00 srcmac=d8:5d:4c:f2:35:e4 dstmac=4c:72:b9:24:e0:21[FONT=monospace]
19:49:53 Spoofed packet UDP 10.99.99.250 : 3072 → 10.99.99.1 : 123 len=76 ttl=64 tos=0x00 srcmac=d8:5d:4c:f2:35:e4 dstmac=4c:72:b9:24:e0:21[/FONT]

Ian

This thread was automatically locked due to age.

Parents

0 BAlfson over 13 years ago

Hi, Ian,

What subnet mask do you have on that interface? Is 'Spoof protection' "normal" or "Strict?"

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 13 years ago

Hi, Ian,

What subnet mask do you have on that interface? Is 'Spoof protection' "normal" or "Strict?"

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data