<br><br>
<div><span class="gmail_quote">On 3/27/06, <b class="gmail_sendername">Paul Wouters</b> <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">On Mon, 27 Mar 2006, Walied Meghezel wrote:<br>> virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "10.0.0.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious:
10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16</a><br><br>exclude <a href="http://192.168.1.0/24"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "192.168.1.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 192.168.1.0/24</a> from that range.</blockquote>
<div> </div>
<div>know how to execlude <a href="http://192.168.1.0/24"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "192.168.1.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 192.168.1.0/24</a> separetly ? However i did the following in stead</div>
<div>virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:172.16.0.0/12"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "10.0.0.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 10.0.0.0/8,%v4:172.16.0.0/12</a> #,%v4:<a href="http://192.168.0.0/16"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "192.168.0.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 192.168.0.0/16</a><br> </div><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">><br>> state STATE_MAIN_R0 to state STATE_MAIN_R1<br>> Mar 27 21:25:13 vpnmain pluto[18788]: "roadwarrior-net"[1]
<br>> 62.114.110.157#5: STATE_MAIN_R1: sent MR1, expecting MI2<br><br>the logs seem to have been damaged somewhere, but it looks like<br>it stops af MI2. Check your firewall rules. Do you allow port<br>4500 udp through?
</blockquote>
<div> </div>
<div>I STOP THE FIREWALL DURING TEST</div>
<div> </div>
<div> </div>
<div> </div>
<div>HOWEVER THE RESULT IS THE SAME </div>
<div>HAVE U ANY OTHER IDEA , THANKS</div>
<div> </div>
<div>WALIED</div></div>