[jacobsen]

Hi Danny,

thanks for the reply.
actually, the LAN if is configured with an /24 address. My intention is to clarify that the LAN side consist of different subnets out of 10/8.
The object name for "Networkobject_172.18.18.0-24" - was only a typo. forget about that.
Well, yes...if broadcast address is enabled in the network objects - does it really matter to answer the question?. Anyway, .254 isn't the broadcast address - it's just the last possible hostaddress.

"Perfome Antispoofing" normaly is activated. No matter if activated or not, the error remains.

Most of the above information is stripped to the basics. So it's not a question of topology design or security policies. It's just, why the packets are dropped. not more.



please try to reply in english. - it just gives everyone the chance to follow the discussion.

regards
Peter

(Im Übrigen ist hier ziemlich alles "durchdacht". Aufgrund der wenigen Information das Gegenteil zu behaupten, wirkt etwas anmaßend)