Vuurmuur recognizes my pppd address as spoofed

[Kevin]

When port forwarding from my LAN network to the proxy (that has a class-c 192.168.1.x/24 IP), the packet gets dropped:

│Nov 3 16:59:28: DROP squid LL090362.AR.Company -> proxy.Home.Peer 'spoof class-c' (in: eth0 out: ppp0 135.20.208.173:2743 -> 192.168.1.200:8888 TCP flags ......

I haven't got anti-spoofing enabled on the zones, so I think it's buggy.

This is the first of several ports I need to forward to another site (data center).

[Victor Julien]

If you inspect the output of the "vuurmuur -b" command you should be able to see what network for the anti-spoofing rules are created for. Something like:

# rule: action: Protect, who: world.inet, danger: spoofing, source: class-c

Then inspect the network to see if it really has spoofing protection disabled. If so please post the contents of the network file (/etc/vuurmuur/zones/inet/networks/world/network.config in my example) here!

[Kevin]

vuurmur -b |grep class-c returns no results.

iptables -vnL | grep class-c

0 0 LOG all -- ppp0 * 192.168.0.0/16 0.0.0.0/0 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `vrmr: DROP spoof class-c ' 3 144 LOG all -- * ppp0 0.0.0.0/0 192.168.0.0/16 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `vrmr: DROP spoof class-c '