Verified it's not coming directly from a certain computer on the network. What could be wanting to spoof the WAN besides the probable reply of malware? I can provide logs but not easy at the moment.

Simple time warner modem, belkin N150, couple clients

  • 1
    IP Spoofing is where the router sees a packet from an IP address on one interface that it believes should originate on the other interface. Some more details would be needed, like what is the connectivity between the N150 and internet - is it in bridge mode? Have you used a private address range internally (,,
    – Paul
    Sep 26, 2011 at 23:34


You must log in to answer this question.

Browse other questions tagged .