----- Original Message -----
From: "jerome" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, March 20, 2003 5:56 AM
Subject: [plug] martian source...


> i rebooted my PC and got an error:

> martian source SOME_IP from 255.255.255.0 etc...

> i did some researching and found out that this are packets from an
internal
> host dropping in at the extrnal interface....

> hmm i didnt touch my routing... can someone tell me the possible reason
for
> this...

it means that your box receieved a packet with a source ip address of
255.255.255.0 and it is illegal... this is a strong indication of ip
spoofing...  with this, it must drop the packet and should log it... see rfc
1812 section 5.3.7 for more details...

fooler.


_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL 
PROTECTED]

Reply via email to