Cisco 4500 certain IP addresses blocked

[PSATECH]

last friday our 4500 began to 'disallow' certain IP addresses to do anything IP related. they cannot ping the router, use the internet, nothing, but they CAN map drives and function on the intranet. it is not limited to a certain range, just a random bunch. even some who have wireless are either lucky or unlucky in this regard.

someone said we may have been hacked, but i have no idea where to look.

incidentally, this was just about the time when our working internet connections were displaying a cryptic "f*** th3 w0rld" title bar.

any help would be greatly appreciated.

thanks
ron

 

[vipergg]

It certainly sounds like a virus , i doubt its a 4500 problem . I would start by making sure all your AV are up to date on your pc's and run them on suspect machines. If they have an unwanted title bar then it sounds like the pc's have been infected or the like.

 

[Belushi]

Post the running configuration of your 4500 assuming it does the routing in your network as well. You are giving us no information to really do anything with.