Route Table help please

[Disease]

Hi,

 

Need a bit of help with routing tables, I am trying to resolve spoofing problems within MS TMG and I am having a few problems configuring the routing tables to stop it ( i am new to routing tables).

 

I understand the theory behind the routing tables but what I am struggling to get is what exactly to enter in.

 

MY network runs as follows:

 

10.217.x.x with a mask of 255.255.0.0 we use various ip sets like 10.217.10.x - 10.217.14.x for DHCP and other ranges for printer etc.

 

How do I cover adding all these ranges to stop the spoofing,

 

I have tried route -p add 10.217.0.0 255.255.0.0 10.217.0.110(the nic) but it does not seemed to have stopped it, what have I missed.

 

Any nudge in the right direction would be much appreciated.

 

Thanks

[chrisbyrd]

Are you sure this is actually fix-able with routing tables?

[featured_spectre]

It should be fixable, how many devices are spoofing on your network?

[ChrisH]

Hi,

 

Need a bit of help with routing tables, I am trying to resolve spoofing problems within MS TMG and I am having a few problems configuring the routing tables to stop it ( i am new to routing tables).

 

I understand the theory behind the routing tables but what I am struggling to get is what exactly to enter in.

 

MY network runs as follows:

 

10.217.x.x with a mask of 255.255.0.0 we use various ip sets like 10.217.10.x - 10.217.14.x for DHCP and other ranges for printer etc.

 

How do I cover adding all these ranges to stop the spoofing,

 

I have tried route -p add 10.217.0.0 255.255.0.0 10.217.0.110(the nic) but it does not seemed to have stopped it, what have I missed.

 

Any nudge in the right direction would be much appreciated.

 

Thanks

 

Did you miss the mask bit out of the command or just when you wrote in here?

 

route -p add 10.217.0.0 255.255.0.0 10.217.0.110

 

Should be

 

route -p add 10.217.0.0 mask 255.255.0.0 10.217.0.110

[Disease]

The server is in a test UO at the moment with only 1 user PC, I get random machines as spoofed, I have added a new persistant route (I did forget to put mask in ), I have cleared all alerts and see what happens.