ASA 5500 : Deny IP spoof

[mhennebicq]

Hi,

I have a web server in LAN (no DMZ used) but the access is very long. This message appears :

Deny IP spoof from (217.128.x.84) to 217.128.x.84 on interface outside

217.128.x.84 is my ISP IP.

When I activate IP Spoof on Outside interface, I have the message :

106021 : Deny ICMP reverse path check from 217.128.x.84 to 217.128.x.84 on interface outside

Here is my conf !

Thanks for yout help,

[owillins]

I think its due to the dual home connection configuration check that one and correct it.

[mhennebicq]

Hi,

What do you mean by 'dual home connection' ?