Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Anti-spoofing
  •  
MrNone

Messages: 18
Karma: 0
Send a private message to this user
Hello,

My ip block is 192.168.1.x - 192.168.1.254 I saw this log on KWF Security Log. What is this?

[11/Nov/2006 23:16:58] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:16:59] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:17:04] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:28:58] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:28:59] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:29:02] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:29:02] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1147 -> 192.168.1.254:139, flags: SYN , seq:3369175387 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:29:04] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:29:05] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1147 -> 192.168.1.254:139, flags: SYN , seq:3369175387 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:29:06] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:29:11] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:29:11] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1147 -> 192.168.1.254:139, flags: SYN , seq:3369175387 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:41:25] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:41:25] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:41:27] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:41:27] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:41:28] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:41:28] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:41:30] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1155 -> 192.168.1.254:139, flags: SYN , seq:2809325467 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:41:36] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1155 -> 192.168.1.254:139, flags: SYN , seq:2809325467 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:41:39] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1155 -> 192.168.1.254:139, flags: SYN , seq:2809325467 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:52:01] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1164 -> 192.168.1.254:139, flags: SYN , seq:1774464306 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:52:06] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1164 -> 192.168.1.254:139, flags: SYN , seq:1774464306 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:52:10] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1164 -> 192.168.1.254:139, flags: SYN , seq:1774464306 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:53:53] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:53:55] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:53:58] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:53:58] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1165 -> 192.168.1.254:139, flags: SYN , seq:3897859419 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:54:04] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1165 -> 192.168.1.254:139, flags: SYN , seq:3897859419 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:54:07] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1165 -> 192.168.1.254:139, flags: SYN , seq:3897859419 ack:0, win:65535, tcplen:0
[11/Nov/2006 23:54:21] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:54:23] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[11/Nov/2006 23:54:28] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[12/Nov/2006 00:06:21] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[12/Nov/2006 00:06:23] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[12/Nov/2006 00:06:26] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.96.1:137 -> 192.168.1.254:137, udplen:50
[12/Nov/2006 00:06:26] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1174 -> 192.168.1.254:139, flags: SYN , seq:1625300817 ack:0, win:65535, tcplen:0
[12/Nov/2006 00:06:32] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1174 -> 192.168.1.254:139, flags: SYN , seq:1625300817 ack:0, win:65535, tcplen:0
[12/Nov/2006 00:06:35] Anti-spoofing: Packet from LAN, proto:TCP, len:48, ip/port:192.168.96.1:1174 -> 192.168.1.254:139, flags: SYN , seq:1625300817 ack:0, win:65535, tcplen:0
[12/Nov/2006 00:06:49] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[12/Nov/2006 00:06:51] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
[12/Nov/2006 00:06:56] Anti-spoofing: Packet from LAN, proto:UDP, len:78, ip/port:192.168.149.1:137 -> 192.168.1.254:137, udplen:50
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
If you look at the source IP address, you'll notice they're not part of your IP segment, hence, those addresses should not be on your LAN, hence the warning.
  •  
MrNone

Messages: 18
Karma: 0
Send a private message to this user
What can i do? Or what i must do?
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
You don't have to do anything, it is not harmful in any way to have devices on your LAN that have IP addresses that do not 'belong' on your LAN. Of course, those machines cannot use any of the resources on your LAN, but that's their loss Smile

If you want to get rid of the warnings (and thus give those devices proper network functionality), you'd have to locate those devices and give them IP addresses that fit into your IP segment.
Previous Topic: Basic Support for Windows Vista
Next Topic: Connection Failover problem
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Nov 23 15:55:00 CET 2017

Total time taken to generate the page: 0.00393 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.