Community discussions

MikroTik App
 
SPDNET
just joined
Topic Author
Posts: 5
Joined: Mon Jun 26, 2017 5:27 pm

ACK number block

Tue Apr 09, 2019 6:26 pm

Hello ,

Is there any possible way to block syn packets that which has acknowledgement number different than 0


Thank you
 
TheCiscoGuy
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Fri Jun 22, 2018 8:32 am

Re: ACK number block

Wed Apr 10, 2019 5:13 am

Maybe I miss understand the question, but since there is nothing to acknowledge on an embryonic TCP session, the ack number should always be 0 at the start of the handshake
Network Solutions Engineer and Trainer
Cisco | Juniper | Mikrotik | Ubiquiti
 
SPDNET
just joined
Topic Author
Posts: 5
Joined: Mon Jun 26, 2017 5:27 pm

Re: ACK number block

Wed Apr 10, 2019 11:23 am

Yes we are under an attack that send syn packets with acknowledgement number :)
I can block it on centos with u32 rules . But i just want to know if there is a way of this on mikrotik

Who is online

Users browsing this forum: Google [Bot], maungmaungmyatsan and 71 guests