Massive inbox login from the-dude

RouterOS The Dude
1

Hello Folks!

On one of our router there is massive inbox logins originating from the dude:

11:04:48 system,info,account user admin logged in from 10.30.0.6 via winbox
11:05:07 system,info,account user admin logged out from 10.30.0.6 via winbox
11:06:08 system,info,account user admin logged in from 10.30.0.6 via winbox
11:06:27 system,info,account user admin logged out from 10.30.0.6 via winbox
11:07:29 system,info,account user admin logged in from 10.30.0.6 via winbox
11:07:48 system,info,account user admin logged out from 10.30.0.6 via winbox
11:08:49 system,info,account user admin logged in from 10.30.0.6 via winbox
11:09:08 system,info,account user admin logged out from 10.30.0.6 via winbox
11:10:09 system,info,account user admin logged in from 10.30.0.6 via winbox
11:10:28 system,info,account user admin logged out from 10.30.0.6 via winbox
11:11:23 system,info,account user admin logged in from 10.30.0.5 via ssh
11:11:29 system,info,account user admin logged in from 10.30.0.6 via winbox
11:11:48 system,info,account user admin logged out from 10.30.0.6 via winbox
11:12:49 system,info,account user admin logged in from 10.30.0.6 via winbox
11:13:08 system,info,account user admin logged out from 10.30.0.6 via winbox
11:14:10 system,info,account user admin logged in from 10.30.0.6 via winbox
11:14:29 system,info,account user admin logged out from 10.30.0.6 via winbox
11:15:30 system,info,account user admin logged in from 10.30.0.6 via winbox
11:15:49 system,info,account user admin logged out from 10.30.0.6 via winbox
11:16:50 system,info,account user admin logged in from 10.30.0.6 via winbox
11:17:09 system,info,account user admin logged out from 10.30.0.6 via winbox
11:18:10 system,info,account user admin logged in from 10.30.0.6 via winbox
11:18:29 system,info,account user admin logged out from 10.30.0.6 via winbox
11:19:31 system,info,account user admin logged in from 10.30.0.6 via winbox
11:19:50 system,info,account user admin logged out from 10.30.0.6 via winbox

Why is that, it does not happen on any other router, I had to block winbox logins from the dude server to mitigate it…

2

The connection breaks probably so it is reconnecting. Don’t use admin user for any purpose. Better to create other user for administration and different user with reduced rights for Dude.

3

Yup, will convert it all to use another monitor user :slight_smile:

Also found the problem, it was as you say, connection breaks due to VPN tunnel problem, some MTU/MRU values had to be reduced. :slight_smile: