Page 1 of 1

blocking ping and syn floods..

Posted: Sat Jun 05, 2004 8:07 am
by ginovilla
any pointers?

Gino

Posted: Sun Jun 06, 2004 7:57 pm
by yancho
I need help too... :roll: :arrow:
jun/06/2004 17:42:47 forward->DROP, in:Local, out:Public2, prot TCP (SYN),
39.120.238.55:1061->152.1.3.33:113, len 40 >
jun/06/2004 17:42:47 forward->DROP, in:Local, out:Public2, prot TCP (SYN),
39.120.238.56:1800->152.1.3.33:113, len 40 >
jun/06/2004 17:42:47 forward->DROP, in:Local, out:Public2, prot TCP (SYN),
39.120.238.57:1092->152.1.3.33:113, len 40 >
jun/06/2004 17:42:47 forward->DROP, in:Local, out:Public2, prot TCP (SYN),
39.120.238.58:1345->152.1.3.33:113, len 40 >
jun/06/2004 17:42:47 forward->DROP, in:Local, out:Public2, prot TCP (SYN),
39.120.238.59:1540->152.1.3.33:113, len 40 >
jun/06/2004 17:42:47 forward->DROP, in:Local, out:Public2, prot TCP (SYN),
39.120.238.60:1306->152.1.3.33:113, len 40 >

and all is "kaput" I can't even ping my router

Posted: Tue Jun 08, 2004 1:15 am
by rz8168
can you post your firewall rules? you may need to turn on the connection tracking in order to get your router work properly.

Posted: Tue Jun 08, 2004 7:52 pm
by smarag
/ ip firewall rule input
add dst-address=!192.168.0.0/24 protocol=icmp action=drop log=yes \
comment="Disable ping from Internet, Enable from Local Network" disabled=no