Ok, I'm stumped here. I need help with some log files if anyone is up
to it...
I wonder why my mail server, which is on the LAN using one-to-one NAT,
keeps trying to make a TCP connection to ports around the 1222 range
back to my SonicWALL PRO? I have restrictions from the LAN out to the
WAN, but LAN to LAN?? I'm confused here...(Ips are XXX for security
reasons)
---03/09/2002 00:26:13.048 - Denied TCP connection from LAN -
Source:(Mail Server)XXX.XXX.XXX.XXX, 25, LAN -
Destination:(SonicWALL)XXX.XXX.XXX.XXX, 1222, LAN - -
I also keep getting this one, which I can't figure out either. It looks
like BOOTP? Can't figure out where it's coming from though!
---03/09/2002 16:17:44.016 - Denied UDP packet from LAN -
Source:0.0.0.0, 68, LAN - Destination:255.255.255.255, 67, LAN -
-
Is this a legitimate spoof, or did someone on the WAN side just forget
to configure or has a bad NIC?
---03/09/2002 22:33:20.432 - IP spoof detected -
Source:255.255.255.255, 35851, WAN - Destination:(Mail
Server)XXX.XXX.XXX.XXX, 80, LAN - MAC address: XX.XX.XX.XX.XX.XX -
-
Any help would really be appreciated. Thanks!!
--Marcus
---
[This E-mail scanned for viruses by Declude/F-Prot Virus]
===================================================================================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
