Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: IP Spoof

IP Spoof 10 years 3 months ago #16065

  • ramasamy
  • ramasamy's Avatar
  • Offline
  • Frequent Member
  • Posts: 67
  • Karma: 0
Hi,

I am getting IP spoof between PIX outside interface and SNMP server which is in Inside network.

Is there any way to find this IP spoofing if so let me know.
The administrator has disabled public write access.

Re: IP Spoof 10 years 3 months ago #16066

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Do you mean that you are getting traffic from the internet (outside) to an SNMP Server on your inside network with a spoofed source address ?

Is the spoofed address a private address range that is getting through to your inside network ? If so you should really be doing some RFC1918 filtering on your firewall anyhow. Even though your ISP should be doing this at their edge device its good practice to put into the access list (at the top) a rule to block all private address ranges.

Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.

Re: IP Spoof 10 years 3 months ago #16115

  • ramasamy
  • ramasamy's Avatar
  • Offline
  • Frequent Member
  • Posts: 67
  • Karma: 0
Hi,

No. The SNMP server is in inside network. And we are monitoring the inside interface of PIX. The SNMP server is in UK and we have a Leased Line The SNMP server is having a public IP adress but it is not monitoring through Internet the traffic is coming through the Leased line.

I am getting a IP spoof between the IP address of PIX outside Interface and the SNMP server. Both of them are my IP address and it is a public IP address.
The administrator has disabled public write access.
Time to create page: 0.076 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup