[Last Call] Learn how to a build a cloud-first strategyRegister Now


I am keep getting this messege from IDS-4235

Posted on 2008-11-17
Medium Priority
Last Modified: 2013-11-29
I am keep getting this error from IDS 4235  with high alert.
Ip Localhost source spoof

Question by:VIJAY2766
1 Comment
LVL 12

Accepted Solution

Hugh Fraser earned 1500 total points
ID: 22976195
The alert indicates the firewall's seen traffic with a source address of 127.x.x.x. Usually, this is someone trying to exploit local host rules on the firewall.

The firewall's correctly blocking the traffic. If it's appearing on an internal interface, you should check the MAC address and track down the culprit.

If it's happening on the external interface, you should pass this info on to your ISP, since they shouldn't be routing this traffic to you.

If it's happening on a wireless interface, lock down access (WPA2). If that's already done and you're using a pre-shared key, it's been compromised.

In all cases, the firewall's doing its thing and blocking the traffic.

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware - Defeated! Client opened the wrong email and was attacked by Ransomware. I was able to use file recovery utilities to find shadow copies of the encrypted files and make a complete recovery.
This article is about my experience upgrading my consulting machine to Windows 10 Version 1709 (The Fall 2017 Creator Update)
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question