• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 481
  • Last Modified:

IP Spoofing, Back Orifice, Sub Seven, Netbus

I have a sonicwall pro firewall on my LAN which keeps sending me alerts to warn me of various attacks, it started about a month ago with the sub seven attacks then came the netbus and back orifice and now I am getting 70-80 alerts a day to say that an IP spoof has been detected but the IP address is that of my own workstation. Why is this happening and how do I stop it!??
0
1524
Asked:
1524
1 Solution
 
SysExpertCommented:
That's what spoofing is. It puts a local address in a packet, so that it can get into your network.
I do not think there is much you can do since this is all coming from the outside !!
The only other thing is to run a good virus detector with updated virus definitions to make sure your machine is clean !!

I hope this helps !
0
 
apaduaCommented:
The idea in IP spoofing is exactly that. Someone will start sending commands with a mal-formed packed, containing the IP address of the internal network as the source address. The concept is interesting, because usually boxes on the inside of the network have more rights than ones on the outside. And usually, the IP address is what is used to detect these rights. Simple firewalls and routers don't check which interface the packet came from. Hence, even if your packet came from the public interface, the IP is of a trusted machine, so arbitrary code could be executed. It's hard to use an attack such as this one, but great for spoofing, say, snmp.

However, you could be getting IP spoofing messages because your machine is configured incorrectly. You could have the wrong default mask, the wrong IP range, or wrong Default Gateway. Check these three things before you get any more worried. Also, check to see if these attacks go on even if your machine is turned off. (Or maybe ONLY when your machine is turned off).

Try to relate things. Best way to find these types of problems (assuming you aren't really being hacked).

Cheers,

Andre
0
 
1524Author Commented:
THANKS
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now