strange reverse path check

From: "RC" <nospam@xxxxxxxxxx>
Date: Wed, 30 May 2007 18:32:38 -0400

I'm playing around with the Cisco ASDM with an ASA5520, only the internal
interface is connected, and I enabled the reverse path check (rpc)
anti-spoofing and within a minute I'm getting syslog warnings of

Deny ICMP [or UDP] reverse path check from 192.168.1.1 to 192.168.xxx.xxx
[so far only 2 internal addresses] on interface [internal interface]

The came in groups of three, first UDP then ICMP, other then putting on a
sniffer and waiting for them to reoccur what's a good way to track these
down? Its now been about 20 minutes since the last round. I'm I reading this
wrong and there isn't a reason to be concerned?

--
Posted via a free Usenet account from http://www.teranews.com

.

Prev by Date: the mac-list command on a 6500 switch
Next by Date: Network Setup (NAT vs static route)
Previous by thread: the mac-list command on a 6500 switch
Next by thread: Network Setup (NAT vs static route)
Index(es):
- Date
- Thread

Relevant Pages

Re: ipv4 regression in 2.6.31 ?
... interface eth1 on host B and let host A ping 192.168.2.1 you get no reply. ... - Strict mode as defined in RFC3704 Strict Reverse Path ... Each incoming packet is tested against the FIB and if the interface ... then loose mode is recommended. ...
(Linux-Kernel)
Re: port scan to juniper fw
... Juniper FW Anti-spoofing mechnism's logic is to check the ... If the packet with SRC-IP a.b.c.d ... enters firewall via interface 'X' and the route on the firewall for ... a.b.c.d is to interface 'Y, this packet will be dropped due to ...
(Pen-Test)
Re: Zugriff auf RPC Server
... > Ich meinte das normale Windows RPC! ... Da schauts im managed Bereich recht mager aus. ... Interface Definition: " The Rpcgen.NET compiler that translates standard ... Prev by Date: ...
(microsoft.public.de.german.entwickler.dotnet.framework)
Re: Port 139 offen. Hilfetexte bisher ohne Erfolg
... D.h. wenn ein Windows Dienst auf einem Interface lauscht, dann redet er auch bereitwillig mit _jedem_, der ihn auf diesem Interface ansprechen kann. ... Ich habe mit Windows 98SE und dem Jana-Server in meinem 2-Rechner-Netz aber offenbar keine Möglichkeit den Dienst abzuschalten. ... Du kannst bei Win98 die Bindung des RPC Dienstes von der externen ... Wenn deine einzige Anforderung an eine PersonalFirewall das Filtern ...
(de.comp.security.misc)
Re: Querying the Security Center
... There is a private RPC interface that the security center control panel uses to talk to the security center service to retrieve various information such as how many AV products are installed, what their statuses are, and soforth. ... MSDN search didn't even show it) that seems to be exactly what I want. ...
(microsoft.public.platformsdk.security)