I'm running on an RV042, firmware 18.104.22.168-tm, and I'm getting the same errors stating "MAC XX-XX-XX-XX-XX-XX is in the allowed list, but has wrong IP." My logs get filled with these errors. I have confirmed that the correct MAC addresses are entered with the respective IP addresses, but the problem persists.
I also use static addresses on my LAN with the options selected for "Block MAC address on the list with wrong IP address" and "Block MAC address not on the list."
I read elsewhere on these forums to reduce the number of static entries to thirty or less, which I have done, but the problem remains.
We're having the same problem on a network here. A workstation is having the exact same issue:
Jul 26 01:05:44 2011
Blocked - IP Spoofing
UDP X.X.X.X:1900->22.214.171.124:1900 on ixp1
Additionally we're seeing:
Jul 26 10:41:49 2011
Connection Refused - Policy violation
TCP 126.96.36.199:80->X.X.X.X:64675 on ixp1
Would really like some clarification and help resolving these issues as it turns out that the second one results in many websites not being able to be used by the workstation. It's a Mac OS X workstation and is not suspect to any infections nor problems.
Just reading the logs; the logs show that the router blocked a spoof ip address. It gives the source address and destination; basically ip spoofing is an IP packet with a forged source ip. So if the router sees different forged packets it will block this packet and log this information showing the source and destination. Also when a private address originates though WAN, this is also considered IP spoofing.
For indepth information on IP SPOOFING you can go to link below,
The second log shows the router refused a connection based on ACL’s inside the router. Show a tcp packet coming from Public address on port 80 with a destination of X.X.X.X port 64675 on xpi. In default ACL’s all traffic from wan to LAN is blocked unless otherwise specified
.Which table is being displayed (outgoing table or incoming table) some information might vary depending on which log table we are looking at.
Configure DHCP WAN Settings on the RV34x Router
A Wide Area Network (WAN) is a network that covers a broad area. A user or network of users can connect to the Internet through an Internet Service Provider (ISP) who offer...
Configure Static IP WAN Settings on the RV34x Router
A Wide Area Network (WAN) is a network that covers a broad area. A user or network of users can connect to the Internet through an Internet Service Provider (ISP) who ...