Community discussions

 
kashifmac2005
newbie
Topic Author
Posts: 28
Joined: Thu Aug 22, 2013 9:27 pm

UDP attack port 53 need good solution

Thu Jan 23, 2014 12:19 pm

Dear all,

I am receiving UDP attack on port 53 for reference snapshot is attached right now for this i am using drop rule but problem is that my router is continuously dropping packets since last night and still doing this i dont know why this attack is not finished yet and what kind of attack is this?

i need solution that can resolve my problem
You do not have the required permissions to view the files attached to this post.
 
markom
Member Candidate
Member Candidate
Posts: 105
Joined: Thu Dec 17, 2009 10:42 pm

Re: UDP attack port 53 need good solution

Thu Jan 23, 2014 12:23 pm

/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=ether1 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether1 protocol=tcp
 
redflag237
just joined
Posts: 21
Joined: Mon Aug 12, 2013 1:17 pm

Re: UDP attack port 53 need good solution

Thu Jan 23, 2014 4:19 pm

Dear all,

I am receiving UDP attack on port 53 for reference snapshot is attached right now for this i am using drop rule but problem is that my router is continuously dropping packets since last night and still doing this i dont know why this attack is not finished yet and what kind of attack is this?

i need solution that can resolve my problem
It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237
 
kashifmac2005
newbie
Topic Author
Posts: 28
Joined: Thu Aug 22, 2013 9:27 pm

Re: UDP attack port 53 need good solution

Fri Jan 24, 2014 9:12 am

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237
Sir any powerful solution for this because i am using drop rule right now
 
leetw302
just joined
Posts: 24
Joined: Wed Jan 22, 2014 1:41 am
Location: Republic of Korea
Contact:

Re: UDP attack port 53 need good solution

Mon Jan 27, 2014 4:38 am

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237
Sir any powerful solution for this because i am using drop rule right now
If, your WAN is Dynamic IP Address, Contact your ISP Provider about IP changes
 
kashifmac2005
newbie
Topic Author
Posts: 28
Joined: Thu Aug 22, 2013 9:27 pm

Re: UDP attack port 53 need good solution

Tue Jan 28, 2014 6:48 am

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237
Sir any powerful solution for this because i am using drop rule right now
If, your WAN is Dynamic IP Address, Contact your ISP Provider about IP changes
have static ip but now problem solve after 2 days of continuous attack maybe attacker taking some rest i am still monitoring it.

Thanks to all for suggestions and guidance which helped me a lot.

Who is online

Users browsing this forum: MSN [Bot] and 69 guests