标题: PIX LOG 106017 [打印本页] 作者: liuxnp 时间: 2005-11-21 17:12 标题: PIX LOG 106017 106017: Deny IP due to Land Attack from IPAddress to IPAddress \r\n其中ipaddress正式连接internet的ip，找了好多地方都没有看到有解决方法 \r\ncisco的log解析是： \r\n%PIX-2-106017: Deny IP due to Land Attack from IP_addr to IP_addr \r\nExplanation This message appears when PIX Firewall receives a packet with the IP source address \r\nequal to the IP destination and the destination port equal to the source port. This indicates a spoofed \r\npacket designed to attack systems. This attack is referred to as a Land Attack. \r\nAction If this message persists, an attack may be in progress. The packet does not provide enough \r\ninformation to determine where the attack originates.