Spoof Attack
Results 1 to 7 of 7

Thread: Spoof Attack

  1. #1

    Question Spoof Attack

    I was checking my SonicWall log, and this turned up:

    05/03/2004 18:07:28.048 FTP: PASV response spoof attack dropped
    Source: 192.165.218.22, 21, WAN
    Destination: 192.168.1.33, 3443, LAN

    So what appears to be going on here? Is someone trying to spoof me?

  2. #2
    Senior Member
    Join Date
    Apr 2004
    Posts
    1,130
    is just ur firewall alerting u that an attack was detect and defeated. i advise u to ignore, since there are tons of attacks per second and its is impossible to seek out each one (except maybe is it is reocurring)
    Meu sítio

    FORMAT C: Yes ...Yes??? ...Nooooo!!! ^C ^C ^C ^C ^C
    If I die before I sleep, I pray the Lord my soul to encrypt.
    If I die before I wake, I pray the Lord my soul to brake.

  3. #3
    Senior Member Info Tech Geek's Avatar
    Join Date
    Jan 2003
    Location
    Vernon, CT
    Posts
    828
    Here is a great resource. Should answer all of your questions.

    http://www.sonicwall.com/services/pd...events_ref.pdf

    *IP Spoof Detected - A packet with a source IP address and arriving at an interface that conflicts with the SonicWALL route table was detected and rejected by the SonicWALL.

  4. #4
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    Don't fret unless you can put it together with other attacks, false positives are a dime a dozen.
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson

  5. #5
    Priapistic Monk KorpDeath's Avatar
    Join Date
    Dec 2001
    Posts
    2,628
    Don't fret unless you can put it together with other attacks, false positives are a dime a dozen.
    Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
    - Samuel Johnson

  6. #6
    Thanks InfoTech, that's exactly what I needed.

    Well, it turns out it was our other tech guru who was the FTP that was blocked out, so all is well. That was a good lesson in log analysis nonetheless.

  7. #7
    Thanks InfoTech, that's exactly what I needed.

    Well, it turns out it was our other tech guru who was the FTP that was blocked out, so all is well. That was a good lesson in log analysis nonetheless.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides