smurf pinging router?

I have a SMC router. This is in my status page:

Security Log

View any attempts that have been made to gain access to your network.

2005/02/15 22:34:43 ** Smurf ** 10.10.106.208 ->> 12.214.xxx.xxx

2005/02/15 22:47:22 ** Smurf ** 10.67.147.104 ->>

12.214.xxx.xxx

2005/02/15 22:47:22 ** Smurf ** 10.67.153.66 ->> 12.214.xxx.xxx

2005/02/15 22:47:22 ** Smurf ** 10.68.15.14 ->> 12.214.xxx.xxx

2005/02/15 22:47:33 ** Smurf ** 10.68.71.60 ->> 12.214.xxx.xxx

2005/02/16 00:17:48 10.10.10.4 login successful 2005/02/16 21:48:40 10.10.10.4 login successful

My private addresses are 10.10.10.xxx The 12.214.xxx.xxx is public on the internet.

My boxes are 3 Linspire (Debian Sarge) and 1 Windows 98.

I think the log shows a box on my lan trying to ping the router. Unless it's someone with a misconfigured machine pinging the internet side. But I don't know enough to say.

AVG, Spybot, and Adaware say the Win98 box is clean. Do I really have Smurf on my Win98 box?

Reply to
Lee
Loading thread data ...

No it's not. It's someone on the internet side spoofing the IP address trying to be considered a LAN machine to gain previleged access, that's why it uses a private IP address.

I don't think so!! No one can ping on the internet with a private IP. It's not possible. Forget it!

Reply to
Nuno Paquete

Great! Thanks for the help.

Lee

Reply to
Lee

There are a couple of alternatives I can think of:

If you have RIP advertising on, you could perhaps attract pings from various misconfigured clients in your immediate ISP surroundings.

Another possibility: one ISP (telia/comhem) I subscribed to, had a local

10.x.x.x network for their DNS servers; similar problems occurred if you tried using the same net locally, inside your NAT.

/Rolf

Reply to
Rolf Blom

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.