Good day
I need some advice please. We are running a hotspot service and we found the the CPU is running very high on our routers. What I found was that nonacitve hosts on the Hotpsot are trying to connect to dropbox. Dropbox uses https to communicate and it is using up the webserver resources because of this. Is there a way to stop them from trying to connect while they are in a nonactive state?
Any information will be appreciated.
Regards
You can try using this rule to limit the amount of active connections a user can have to your hotspot at a given time so it doesn’t have to process as much:
/ip firewall filter
add action=drop chain=pre-hs-input connection-limit=10,32 dst-port=64872-64875 protocol=tcp
You could also outright block the IP addresses for dropbox in the firewall filter as well in the pre-hs-input chain.
http://bgp.he.net/search?search[search]=dropbox&commit=Search