NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
DoS Attacks in Log
New Orbi yesterday, coming from an (awful) Nighthawk R7000. Looking at the log, seeing attacks I never saw with the R7000. Lots of these: [DoS Attack: SYN/ACK Scan] from source: 51.79.160.249, po...
fmalloy wrote:I guess it's saying that the router firewall is doing its job, but something to be concerned about?
You are correct. The firewall is doing what it is supposed to. There is an option in the Orbi web interface to stop displaying these reports. I personally leave them in the log for entertainment. I have never found documentation for what the firewall notice is actually describing, which would make the log more informative. When I look at my Orbi WAN traffic with Wireshark, for example, my cable system appears to be flooded with ARP packets. What has led Orbi to think that they are directed at me? And, how many does it take to be a "scan"?
p.s. I have kept every Orbi log for over a year. There are reports such as these every day, and my Orbi has never gone down.
fmalloy wrote:I guess it's saying that the router firewall is doing its job, but something to be concerned about?
You are correct. The firewall is doing what it is supposed to. There is an option in the Orbi web interface to stop displaying these reports. I personally leave them in the log for entertainment. I have never found documentation for what the firewall notice is actually describing, which would make the log more informative. When I look at my Orbi WAN traffic with Wireshark, for example, my cable system appears to be flooded with ARP packets. What has led Orbi to think that they are directed at me? And, how many does it take to be a "scan"?
p.s. I have kept every Orbi log for over a year. There are reports such as these every day, and my Orbi has never gone down.