The Graveyard - Products No Longer Supported > DIR-605L

Router Troubleshooting, flood attack on lan ports..

(1/3) > >>

Commissar:
Hi there, im new on this forum, i have problem with router like i have 20mb internet speed with cable directly puted into PC, but when i put into router then from router into PC, my internet speed is 2-3 mb.. i have firewall on pc and i blocked every single application and still its 2-3 mb speed..
I found something interesting on router configuration,

Time and Date   Message
Feb 15 18:28:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:28:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:27:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:27:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:26:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:26:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:25:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:25:12   Whole System ACK Flood Attack from WAN Rule:Default deny
Feb 15 18:24:12   Per-source ACK Flood Attack Detect (ip=104.16.59.37) Packet Dropped
Feb 15 18:24:12   Whole System ACK Flood Attack from WAN Rule:Default deny

thats these packet drops, i tried to fix it and trying to find a solution but nothing works i tried everything, from to turn (router) firewall off (didnt helped), to turn everything off(also didnt helped), im currently using DIR-605L router soo i really need help, because i dont want to spend money on a new router..   :)

FurryNutz:
Link>Welcome!

What model D-Link router do you have?


* What Hardware version is your router? Look at sticker under the router case.
* Link>What Firmware version is currently loaded? Found on the routers web page under status.
* What region are you located?
* Are you wired or wireless connected to the router?

Internet Service Provider and Modem Configurations

* What ISP Service do you have? Cable or DSL?
* What ISP Modem Mfr. and model # do you have?
Check the IP address you see in the attack at domaintools.com to see where that IP address is coming from.

Commissar:

--- Quote from: FurryNutz on February 15, 2019, 09:32:34 AM ---Link>Welcome!

What model D-Link router do you have?


* What Hardware version is your router? Look at sticker under the router case.
* Link>What Firmware version is currently loaded? Found on the routers web page under status.
* What region are you located?
* Are you wired or wireless connected to the router?

Internet Service Provider and Modem Configurations

* What ISP Service do you have? Cable or DSL?
* What ISP Modem Mfr. and model # do you have?
Check the IP address you see in the attack at domaintools.com to see where that IP address is coming from.

--- End quote ---


i have dlink DIR-605L
Hardware: B2
Firmware 2.12
Region: Serbia
Im wired connected

ISP Service: KBCNet
And Cable

FurryNutz:
If you have the SPI firewall enabled then this is the router doing it's job and reporting whats happening in the logs. It's stopping the attacks.
You'll need to contact your ISP to see if they can help you block these from actually happening or move your modems IP address your ISP gives you to a different IP address. However the attacker could follow you.

Good Luck.

Commissar:
I already did, but they said its not attacker, its a something about firewall rules are so strict, so router is distraffic the ports..
so i dont know how to change the rules at firewall

Navigation

[0] Message Index

[#] Next page