[Snort-users] loopback traffic

Bob Sukovich bob at ...11837...
Thu May 20 08:34:10 EDT 2004


This message;

106016: Deny IP spoof from (127.0.0.1) to static on interface outside

has appeared with regular frequency over the past few days. It seems to
be prodding at all the addresses on the outside of the pix. In addition
there has been some apparent malicious/recon activity inside the pix
sourced from a user who uses a MS VPN endpoint inside the pix. 

Robert E. Sukovich
Senior Network Security Engineer
CISSP /CCNA  
714.393.1461






More information about the Snort-users mailing list