NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
chrisling
Apr 22, 2020Aspirant
[DoS attack: Fraggle Attack] on RAX20 logs
Hi there, I noticed there are quite a lot of following entires from the log of my RAX20,is there anything I need to worry about? [DoS attack: Fraggle Attack] from source UNKNOWN,port 68 Thurs...
michaelkenward
Apr 23, 2020Guru - Experienced User
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
216.58.199.106 and 74.125.23.108 are Google.
157.240.199.34 is Facebook
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
chrisling wrote:
This RAX20 is connecting to an uplink R7000 as a edge router front facing the ISP's modem.
Sounds messy. Are you running "Double NAT" because you like things that way? Heaven only knows what the modem is also doing.