cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1034
Views
0
Helpful
4
Replies

PIX-2-106016 Deny IP spoof from 127.0.0.???

Brent Rockburn
Level 2
Level 2

Hey guys,

Just checking my PIX logs and I keep getting this alert "Aug 21 2008 09:37:15: %PIX-2-106016: Deny IP spoof from (127.0.0.??) to 108.122.0.0 on interface dmz"

The last octet of the 127 address changes and it's to the same destination. Just wondering if this is a config issue on my end or is it a legit concern.

thanks,

4 Replies 4

andrea.meconi
Level 2
Level 2

Can you use the show arp command to determine the ethernet source address.

Regards.

There are no arp entries for the source or destination and there are no connections with those numbers either.

Still there it is.

What do you think about a capture?

What do you think about a capture?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: