On Sat, 25 Oct 1997, Bill Hamel wrote: > Hello, > > Well maybe not spoofing *BUT*. > > I noticed some connectivity problems to one of our MAXes with SNMP. I > telnet'ed to the MAX and did a "show users". Which showed this > > I 245348133 2:20 7:11 26400 MP[0] 204.120.80.167 mcar > I 245348124 > 2:23 4:2 28800 MP[0] 204.120.80.161 geme > < a bunch more IP's and > then > > I 245348028 1:17 3:4 26400 MP[0] 205.164.157.2 mkm If this is your DNS server by chance? Then you may want to ensure that you have POOL ONLY set to yes , under Wan Options. Users make this mistake a lot, They put the DNS server under I.P. Addresses and if you don't have that option selected then BAMM he takes the I.P. address of your server Jason > > This is the IP address of one of our servers < 205.164.157.2 >, I suspect > this user is playing some sort of spoofing game which is not a good thing. > > Is there a way to deny the max from accepting a connection from certain IP > addresses within our Network ? > > Our boarder routers are configured not to allow traffic that originates > outside of our network with IP's of our network ( anti-spoofing ) but what > about this sort of attack where someone logs in with an IP of a server on > the network ? > > Any insight here greatly appreciated. > > Regards, > Bill Hamel > > > > > ++ Ascend Users Mailing List ++ > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com > To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> > ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <!--X-Follow-Ups-End--> <!--X-References--> <HR> <STRONG>References</STRONG>: <UL> <LI><STRONG><A HREF="msg10086.html">(ASCEND) Our IP Spoofed a MAX ... !</A></STRONG></LI> <UL> <LI><EM>From</EM>: Bill Hamel <bill@hamel.net></LI> </UL> </UL> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg10100.html">Re: (ASCEND) dense admin with a new toy</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg10098.html">Re: (ASCEND) Pipeline List?</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg10091.html">Re: (ASCEND) Our IP Spoofed a MAX ... !</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg10092.html">Re: (ASCEND) Our IP Spoofed a MAX ... !</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="maillist.html#10099"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd216.html#10099"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>