Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1044
Views
0
Helpful
4
Replies

PIX-2-106016 Deny IP spoof from 127.0.0.???

Brent Rockburn
Level 2
Level 2

‎08-21-2008 08:43 AM - edited ‎03-11-2019 06:34 AM

Hey guys,

Just checking my PIX logs and I keep getting this alert "Aug 21 2008 09:37:15: %PIX-2-106016: Deny IP spoof from (127.0.0.??) to 108.122.0.0 on interface dmz"

The last octet of the 127 address changes and it's to the same destination. Just wondering if this is a config issue on my end or is it a legit concern.

thanks,

Labels:
0 Helpful
4 Replies 4

andrea.meconi
Level 2
Level 2

‎08-21-2008 08:54 AM

Can you use the show arp command to determine the ethernet source address.

Regards.

0 Helpful

Brent Rockburn
Level 2
Level 2
In response to andrea.meconi

‎08-21-2008 09:00 AM

There are no arp entries for the source or destination and there are no connections with those numbers either.

Still there it is.

0 Helpful

andrea.meconi
Level 2
Level 2
In response to Brent Rockburn

‎08-21-2008 09:03 AM

What do you think about a capture?

0 Helpful

andrea.meconi
Level 2
Level 2
In response to Brent Rockburn

‎08-21-2008 09:04 AM

What do you think about a capture?

0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card