Community discussions

MikroTik App
 
hamid1626
just joined
Topic Author
Posts: 2
Joined: Fri Aug 27, 2010 2:43 pm

how to drop udp attack without port in mikrotik?

Fri Dec 28, 2018 3:48 pm

Hi friends
I Have a problem with my CCR Router,36Mbps udp connection without port? do you know what is this and how to block?
Image
You do not have the required permissions to view the files attached to this post.
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1782
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: how to drop udp attack without port in mikrotik?

Fri Dec 28, 2018 3:50 pm

UDP is a port oriented protocol just like tcp. these may be invalid packets / spoofed or just not reported.
 
shiyiqiang08
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Wed Dec 05, 2018 7:35 am

Re: how to drop udp attack without port in mikrotik?

Sat Dec 29, 2018 8:15 am

you can use packet sniff to see what it is
or you can use wireshark on pc to see what it is
it is strange ,udp often have it's port
 
R1CH
Forum Guru
Forum Guru
Posts: 1101
Joined: Sun Oct 01, 2006 11:44 pm

Re: how to drop udp attack without port in mikrotik?

Sun Dec 30, 2018 5:22 pm

Those are fragments. It looks like you are being attacked by a reflected DNS DDoS amplification attack, there isn't much you can do about it as by the time you could block it it's already consumed your bandwidth. You should also ensure you have correct firewall rules to make sure you aren't actually running insecure DNS too.

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], rnasci, sebi099, shampooms and 145 guests