Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Commissar]

Hi there, im new on this forum, i have problem with router like i have 20mb internet speed with cable directly puted into PC, but when i put into router then from router into PC, my internet speed is 2-3 mb.. i have firewall on pc and i blocked every single application and still its 2-3 mb speed..
I found something interesting on router configuration,

Time and Date   Message
Feb 15 18:28:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:28:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:27:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:27:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:26:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:26:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:25:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:25:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:24:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:24:12   Whole System ACK Flood Attack from WAN Rule:Default deny

thats these packet drops, i tried to fix it and trying to find a solution but nothing works i tried everything, from to turn (router) firewall off (didnt helped), to turn everything off(also didnt helped), im currently using DIR-605L router soo i really need help, because i dont want to spend money on a new router..   

[FurryNutz]

Link>Welcome!

What model D-Link router do you have?

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?
• Are you wired or wireless connected to the router?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

Check the IP address you see in the attack at domaintools.com to see where that IP address is coming from.

[Commissar]

Link>Welcome!

What model D-Link router do you have?

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?
• Are you wired or wireless connected to the router?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

Check the IP address you see in the attack at domaintools.com to see where that IP address is coming from.

i have dlink DIR-605L
Hardware: B2
Firmware 2.12
Region: Serbia
Im wired connected

ISP Service: KBCNet
And Cable

[FurryNutz]

If you have the SPI firewall enabled then this is the router doing it's job and reporting whats happening in the logs. It's stopping the attacks.
You'll need to contact your ISP to see if they can help you block these from actually happening or move your modems IP address your ISP gives you to a different IP address. However the attacker could follow you.

Good Luck.

[Commissar]

I already did, but they said its not attacker, its a something about firewall rules are so strict, so router is distraffic the ports..
so i dont know how to change the rules at firewall

[FurryNutz]

The firewall feature is mostly automatic. You can set Port Forwarding configurations to help with ports getting thru from the WAN side. Theres no configurations for the firewall though. It's automatic. What happens if you temporarily disable SPI? Re-enable after testing.

What was the details of that IP address listed in the logs?

[Commissar]

The firewall feature is mostly automatic. You can set Port Forwarding configurations to help with ports getting thru from the WAN side. Theres no configurations for the firewall though. It's automatic. What happens if you temporarily disable SPI? Re-enable after testing.

What was the details of that IP address listed in the logs?

When i disable spi, logs are not showing anymore, but the ping is higher than usuall..

[FurryNutz]

What was the details of that IP address listed in the logs?

[Commissar]

What was the details of that IP address listed in the logs?

It says its a cloudflare

[FurryNutz]

Are you using any custom DNS on the router or do any of your devices use cloudfare DNS, 1.1.1.1?

[Commissar]

Are you using any custom DNS on the router or do any of your devices use cloudfare DNS, 1.1.1.1?

no, its set on " Receive DNS from ISP"

[FurryNutz]

Do you have anything or a device that has services from this address?
Do you have a different router that you can test with?

[alphahydrae]

I have the same issue. I posted it in reddit/r/techsupport.
Here is the link: https://www.reddit.com/r/techsupport/comments/as7w89/my_pc_location_is_incorrect_when_router_is/

@Commissar, have you checked your Speedtest? My Speedtest gives me different recommended server. Try to check yours. Im from PH but Speedtest tells me that recommended server is either India, Russia, Canada, or some other Eastern EU which causes the internet speed to slow down since its far away from where I am.

There is no issue when router is disconnected from the ISP Router-Modem. Issue only occurs when this same DLINK DIR 605L is connected to it and I just experienced this recently this Feb as well.

[FurryNutz]

Link>Welcome!

• If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. Call the ISP and ask to see if the ISP modem can be bridged. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.
  Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on a Router

I have the same issue. I posted it in reddit/r/techsupport.
Here is the link: https://www.reddit.com/r/techsupport/comments/as7w89/my_pc_location_is_incorrect_when_router_is/

@Commissar, have you checked your Speedtest? My Speedtest gives me different recommended server. Try to check yours. Im from PH but Speedtest tells me that recommended server is either India, Russia, Canada, or some other Eastern EU which causes the internet speed to slow down since its far away from where I am.

There is no issue when router is disconnected from the ISP Router-Modem. Issue only occurs when this same DLINK DIR 605L is connected to it and I just experienced this recently this Feb as well.