Security

Ask something
Discussion Locked

Spoofing address

0 helpful
3 replies

by tzutzasialbu

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey folks,

I started getting these spoofing messages in my Sonicwall Pro 200 and it is really weird.

05/09/2006 12:34:31.800 IP spoof detected 192.168.7.11, 138, LAN 192.168.7.255, 138, WAN MAC address: 00.0D.29.96.29.00

I disabled the 192.168.7.0 subnet a long while ago and today these messages start showing in my log.

Any ideas?

Thanks

3 replies

by oldbag

How many systems do you have? The clue is that you have a MAC address to go to. If you have a small network, do ipconfig /all on all systems and try to find the one with the physical address that matches. Once you have that, you can start troubleshooting the machine that is causing the error.

by tzutzasialbu

Thank you for your answer! I found the faulty NIC. When I disabled the subnet, I had one machine with a static IP address in the 192.168.7.x subnet and I forgot to change it. :(

This discussion is closed to new replies.