*ip Spoofing*

[Private Citizen]

Got this twice on my syslog server that my router feeds to. This was the routers log. What is *IP SPOOFING* and why did this show up twice on my log file, and should I be worried?

Thanks.

[skritch]

Originally posted by Private Citizen
Got this twice on my syslog server that my router feeds to. This was the routers log. What is *IP SPOOFING* and why did this show up twice on my log file, and should I be worried?

Thanks.

1) Some packet pretending it's from an IP address it isn't.
2) Beats me. Probably because it saw a spoofed IP packet on the wire.
3) Depends.

[KoZLop]

I had this happen to me before and I asked my friend and he said there is no way to stop it, besides bunch of firewall and a new ip.

[XOR != OR]

1) skritch got it, it's just an ip packet with a false source address.

Should you be worried? No, on it's surface, this is nothing to be concerned with. As long as you have a firewall up, it should protect against such attacks ( trivial to do, so any modern router/firewall combo should do the trick ).

[Private Citizen]

Cool beans. Thanks.