[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW1] logfile flood
Running dual Nokia boxes in VRRP config, IPSO 3.3 and Checkpoint 4.1sp2. When I added the a rulebase my logfile started getting flooded with drop messages for EGP protocol originating on the outside interface of the master firewall as "localhost" and destined for a non-existant private address. The info field in the logfile reads "reason: local interface address spoofing". This is repeated about 80 times every couple of seconds. I disconnected the outside interfaces to make sure the source was not on the outside and the errors keep coming. This has been escalated to second level support at Nokia but I'm not getting anywhere. Anyone seen this? ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|