From owner-freebsd-questions  Thu Aug  5 14:57:59 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13])
	by hub.freebsd.org (Postfix) with ESMTP id 3F4FB1556E
	for <freebsd-questions@FreeBSD.ORG>; Thu,  5 Aug 1999 14:57:56 -0700 (PDT)
	(envelope-from shovey@buffnet.net)
Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55])
	by buffnet4.buffnet.net (8.8.7/8.8.7) with ESMTP id RAA12764;
	Thu, 5 Aug 1999 17:57:36 -0400 (EDT)
	(envelope-from shovey@buffnet.net)
Date: Thu, 5 Aug 1999 17:57:35 -0400 (EDT)
From: Steve Hovey <shovey@buffnet.net>
To: marcus@mail01.redcentre.com
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: security check output
In-Reply-To: <199908051627.CAA01600@mail.beyondtech.net>
Message-ID: <Pine.BSF.4.05.9908051756320.16418-100000@buffnet11.buffnet.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


That means either you changed the ethernet cards in several boxes on your
network, or someone was spoofing..  To stop spoofing from outside your
network to inside your network, one of the things you can do is filter out
packets FROM your internal class Cs if the come in from your external
port.

On Fri, 6 Aug 1999 marcus@mail01.redcentre.com wrote:

> 
> 
> mail01 kernel log messages:
> 
>  Hi - would anybody be able to explain to me whats happening here 
> 
> (and what I should do to fix it)?
> 
> 
> <color><param>7F00,0000,0000</param>> e: table is full
> 
> > arp: 203.xx.xx.xxx moved from 00:yy:yy:yy:yy:0f to 00:zz:zz:zz:zz:ba
> 
> > arp: 203.xx.xx.xxx moved from <color><param>7F00,0000,0000</param>00:zz:zz:zz:zz:ba <color><param>7F00,0000,0000</param>to <color><param>7F00,0000,0000</param>00:yy:yy:yy:yy:0f<color><param>7F00,0000,0000</param>
> 
> > arp: 203.xx.xx.xxx moved from <color><param>7F00,0000,0000</param>00:yy:yy:yy:yy:0f<color><param>7F00,0000,0000</param> to <color><param>7F00,0000,0000</param>00:zz:zz:zz:zz:ba<color><param>7F00,0000,0000</param>
> 
> > arp: 203.xx.xx.xxx moved from <color><param>7F00,0000,0000</param>00:zz:zz:zz:zz:ba<color><param>7F00,0000,0000</param> to <color><param>7F00,0000,0000</param>00:yy:yy:yy:yy:0f<color><param>7F00,0000,0000</param>
> 
> > arp: 203.43.52.130 moved from <color><param>7F00,0000,0000</param>00:yy:yy:yy:yy:0f<color><param>7F00,0000,0000</param> to <color><param>7F00,0000,0000</param>00:zz:zz:zz:zz:ba<color><param>7F00,0000,0000</param>
> 
> 
> 
> </color>Marcus
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message