NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Chinwabee
Jul 05, 2020Aspirant
Xr700 and constant dos attacks in log with internet loss
Hello, I apologize in advance if starting a new post for this is out of order or anything but I am quite fed up with this issue. I have previously went thru trying two xr500's (for different reason i...
Netduma-Fraser
Jul 06, 2020NetDuma Partner
Sorry to hear you're having this issue. Generally these entries are just showing what connections you've made. For example the first and last IPs show Netflix and the game server. The others do belong to various US ISPs so it is possible an attack is coming from a player.
Lets explore other options before that. How is the Xbox setup to achieve an Open NAT? Is it in the DMZ for example? Is the Geo-Filter being used when gaming?
Lets explore other options before that. How is the Xbox setup to achieve an Open NAT? Is it in the DMZ for example? Is the Geo-Filter being used when gaming?
- ChinwabeeJul 07, 2020Aspirant
Thanks for the reply. I am quite certain that its attacks that kill the internet because like I said it only happens when my son plays that game. With that being said though...yesterday and today he started making sure he is always appearing offline when he plays and we havent had any attacks for the past day & a half so we'll see if the trend continues. I thought about going in and swapping out my cable modem or seeing if they can just issue it a new ip if apearing offline continues working and telling him that he can only play that game appearing offline or dont play it at all and hopefully we could stay clean.
I am no expert again but to answer your questions the best I can. No the dmz is not being used and yes the geo filter is. There are 4 xboxes that can all get open nat except when some are playing the same game then one boxes game nat may go moderate but thats pretty typical from what i've seen. Only 3 of the 4 boxes are in the geo filter though. I cant really say anything about any issues related to performance of the router outside of the dropping some connections at dhcp lease change time (doesnt happen to every device everytime but its still annoying).
Other than that the kids fuss about occasional lag spikes but from what i've seen thats mostly around lease change time as well and mostly hits every one of their boxes cuz they will simultaneously complain from their rooms and sometimes one will get booted off and others wont. Leases also occur in the log at multiple random times throughout the day even though they say once every 24 hrs.
i guess in the end I was just hoping and wondering if there was any help thru the router or other means to stop the nonsense of someone bein able to disrupt our internet like they've been. The lease change internet disruptions are annoying but secondary to he 'attacks.'
- Netduma-FraserJul 07, 2020NetDuma PartnerThat is very strange, I would have thought it would be someone in a ranked game that he's playing with for example trying to get the advantage. Switching to appear offline wouldn't make a difference there, perhaps it is someone on their friends list who for some reason has a problem with them playing that game?
You could try disabling the Geo-Filter fully but given the offline method has worked I don't think that is an issue. If you unplug the modem for 5 minutes and plug it in that should get you a new IP. We do have a fix in 3.0 for that issue. Meanwhile you can try setting reserved IPs for the devices in LAN Settings.- ChinwabeeJul 07, 2020Aspirant
Netduma-Fraser wrote:
perhaps it is someone on their friends list who for some reason has a problem with them playing that game?
This is exactly what the tech support guy at spectrum said he suspected as he said it happened to him in the past during his playstation playing days.
You could try disabling the Geo-Filter fully but given the offline method has worked I don't think that is an issue. If you unplug the modem for 5 minutes and plug it in that should get you a new IP. We do have a fix in 3.0 for that issue. Meanwhile you can try setting reserved IPs for the devices in LAN Settings.As far as the modem being unplugged I have unplugged it and left it unplugged for about 30 secs and all but never did the 5 mins (didnt know that did anything different but I will try it). I assume that the reserved ip's you mention mean just setting static ip's for the boxes? I can certainly do that but what exactly will that accomplish relative to the issue of attacks?