An Accepted Solution is available for this post. Jump to solution.
Blocked Spoofing Protection Message to DVR from broadcast IP?
prisaz
Legend
‎09-30-2012 08:58 AM

Anyone else see this in the Actiontec firewall log, and know why or what it is?

Sep 30 11:44:23 2012Inbound TrafficBlocked - Spoofing protectionUDP 192.168.1.100:1900->239.255.255.250:1900 on ppp0
Sep 30 11:43:54 2012Firewall InfoRate Limit11 messages of type [12] Spoofing protection suppressed in 1

Oh yes this seems to be constant. Perhaps I need to see if another STB or device on the local net has the 100 IP?

0 Likes
Reply
1 Solution

Correct answers
An Accepted Solution is available for this post. Jump to solution.
Re: Blocked Spoofing Protection Message to DVR from broadcast IP?
prisaz
Legend
‎10-01-2012 12:30 PM
@prisaz wrote:

Anyone else see this in the Actiontec firewall log, and know why or what it is?

Sep 30 11:44:23 2012Inbound TrafficBlocked - Spoofing protectionUDP 192.168.1.100:1900->239.255.255.250:1900 on ppp0
Sep 30 11:43:54 2012Firewall InfoRate Limit11 messages of type [12] Spoofing protection suppressed in 1

Oh yes this seems to be constant. Perhaps I need to see if another STB or device on the local net has the 100 IP?

Universal plug and play from the STB sending out a broadcast? Did not make since to me. I ran wireshark and did not see it. I reset the router and the issue went away. Almost seemed like someone was sending out broadcast on the WAN with the STB IP.

View solution in original post

0 Likes
Reply
3 Replies
An Accepted Solution is available for this post. Jump to solution.
Re: Blocked Spoofing Protection Message to DVR from broadcast IP?
prisaz
Legend
‎10-01-2012 12:30 PM
@prisaz wrote:

Anyone else see this in the Actiontec firewall log, and know why or what it is?

Sep 30 11:44:23 2012Inbound TrafficBlocked - Spoofing protectionUDP 192.168.1.100:1900->239.255.255.250:1900 on ppp0
Sep 30 11:43:54 2012Firewall InfoRate Limit11 messages of type [12] Spoofing protection suppressed in 1

Oh yes this seems to be constant. Perhaps I need to see if another STB or device on the local net has the 100 IP?

Universal plug and play from the STB sending out a broadcast? Did not make since to me. I ran wireshark and did not see it. I reset the router and the issue went away. Almost seemed like someone was sending out broadcast on the WAN with the STB IP.

0 Likes
Reply
An Accepted Solution is available for this post. Jump to solution.
Re: Blocked Spoofing Protection Message to DVR from broadcast IP?
Hubrisnxs
Legend
‎10-01-2012 01:27 PM

Verizon Router Multicasting To My Home Network

interesting discussion there.   although brief 

0 Likes
Reply
An Accepted Solution is available for this post. Jump to solution.
Re: Blocked Spoofing Protection Message to DVR from broadcast IP?
prisaz
Legend
‎10-02-2012 07:38 AM
@Hubrisnxs wrote:

Verizon Router Multicasting To My Home Network

interesting discussion there.   although brief 

Strange that multicast on port 1900 wich is plug and play and gives a spoofing warning as if there was two devices attempting to use the same IP.

After I reset my router I can remote DVR and all works fine now that my external IP is on a different network. Strange because the private IP should not route, unless Verizon is doing/allowing a Multicast for the guide data to everyone with a STB. I have 192.168.1.100-108 so why would it just be going to 100?

But now it no longer happens. I don't like this Actiontec Firmware. Almost makes me want to go back to my Linux up front and forget the features. My Linux box would log EVERYTHING, and I never had these issues, plus all my STBs/DVRs updated just fine. Just no remote and no CID.

Sep 30 11:44:23 2012Inbound TrafficBlocked - Spoofing protectionUDP 192.168.1.100:1900->239.255.255.250:1900 on ppp0

Then I get thes every 10-15 seconds. It now wonder why we have choked up traffic.

Oct 2 10:20:15 2012Firewall InfoRate Limit7 messages of type [15] Default policy suppressed in 1 second(s)
0 Likes
Reply