A check of the ARP cache on the firewall could identify if it really is an address or something bogus happening.
Also, a ping sweep (arp scan) may help identify a proper host ?
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit
www.sec-1.com
or PM me for details.
