NAT security issues
does anyone know of any exploits that NAT gateways are vulnerable to. I am experiencing strange network activity originating from within my local network which is connected to the internet through a linux NAT gateway device.
other than sporadic and unexplainable behaviour of internal clients, open connections to internal machines have been noted from 192.168.1.2. our network uses the 192.168.0 subnet and no devices internally have an address in the 192.168.1 subnet.
the network is quite advanced and uses a linux PDC as well as linux file servers all using samba to facilitate a variety of windows 98 and xp clients as well as a mac but it is a home network and there is absolutely no possiblity of someone with physical access to the network having anything to do with any of our problems.