Quite right. Not odd at all. But here's the thing. I am not doing anything silly when this happens. I am not starting up the global vpn client. At least I don't think I am.

Tom



Darrell Shandrow wrote:

Hi Tom,

That source IP looks oddly like those given to the Global VPN Client's
virtual adapter...

Darrell Shandrow - Shandrow Communications!
Technology consultant/instructor, network/systems administrator!
A+, CCNA, Network+!
Check out high quality telecommunications services at http://ld.net/?nu7i
All the best to coalition forces carrying out Operation Iraqi Freedom!
----- Original Message ----- From: "Tom Reingold" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 09, 2003 2:01 PM
Subject: [SonicWALL]- IP spoof detected




When I initiate an ssh session from my computer, my sonicwall sends this:

09/09/2003 17:00:54.192 - IP spoof detected - Source:223.1.1.128, 137,
LAN - Destination:192.35.43.67, 137, WAN - MAC address:
00.0B.DB.A0.E6.F5 -

The destination IP address is changed to protect the innocent. Why does
outbound ssh seem like an IP spoof to the sonicwall?

Thanks, folks.

Tom


--- [This E-mail scanned for viruses by Declude/F-Prot AV]



============================================================================ =======================

To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email

put the following: unsubscribe sonicwall your_name


The archive of this list is at

http://www.mail-archive.com/sonicwall%40peake.com/



--- [This E-mail scanned for viruses by Declude/F-Prot AV]

===================================================================================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the 
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/



---
[This E-mail scanned for viruses by Declude/F-Prot AV]

===================================================================================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the 
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/




Reply via email to