Name

MMCC-650 — Data connection offer with wrong address

Severity

W (warning), A (alert)

Message text

Invalid %s address %s (expected %s)

Description

A data connection address offer from client/server arrived, but the peer address is not the one of the control connection.

The W level message means that a server conected by a plug-to address offered the original destination address. In this case, the connection continues, although the proxy still uses the new (plug-to) address.

The A level message means that a peer uses quite other address. This can be an intrusion attempt, the session is terminated. However, this behavior can be also caused by using some form of server farms, in which case the admin can allow peer address change in the configuration (SESSION-ACL.ALLOW-PEER).

See also

MMCC-750(6), logging(7)

Authors

This man page is a part of Kernun Firewall.
Copyright © 2000–2023 Trusted Network Solutions, a. s.
All rights reserved.