Netgear Firewall Log Message help??

[blakey2]

Hello all,

If someone could please shed some light on the following firewall log entry:

Tues, 05/10/2005 10:26:37 - IP packet dropped - Source:xxx.xxx.xxx.xxx, 0, LAN - Destination:xxx.xxx.xxx.xxx, 0, LAN - 'Land attack'
End of Log ----------


-- WHERE xxx.xxx.xxx.xxx is the same IP address both times and happens to be our 'visible' external IP address.

-- We were SPAM blacklisted yesterday as seem to have a trojan on the network using its own SMTP protocol, but that is all fixed now. (Blocked all outgoing SMTP processes from internal IP address range, except for our mail server) -- All well now

Anywho, I realise it is not a good looking logfile entry but don't really know what it means.

Regards - Chris.

 

[Patrickp1973]

It means your router has picked up a packet that appears to be addressed to itself / from itself .. Obviously a spoofed packet.. No real concern as its being dropped.