NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
trigger113
Jan 23, 2016Tutor
netgear C3700-100NAS sporatic web browsing issues (able to ping / not able to browse).
I have a C3700-100NAS Router/Modem for about 3 months now with comcast as my Internet Service Provider (ISP). Upon first install around November of 2015, I had issues getting the asset to work ap...
MeIMyself
Jan 26, 2016Initiate
I suggest you read what is at this link http://searchsecurity.techtarget.com/definition/SYN-flooding then go to the page in Genie under advanced setup wan setup and make certain that none of those little check boxes are checked for starters.
trigger113
Jan 26, 2016Tutor
Thanks MelMyself for the advice, but I made certain those lil guys were not checked.
After reviewing some routers (that I haven't visited in a while), I discovered that one was acting as a DHCP/DNS on the network which was confusing a lot of devices. I resolved that quickly and it cleared up a lot of client issues, but not all.
One local network in particular was having a weird issue (no matter what I tried). This local network is using a ASUS RT-N66U Router. For some reason, any device (iphone, samsung phone, note, ipad, laptop, samsung tv, didn't matter) that would connect to it would load pages for about 10 minutes without issue, and then all of a sudden cease to load any pages (with timeout errors on the browsers). After several hours+++ assigning new ip ranges, new dns servers, etc on the ASUS router.... nothing worked... FINALLY... finally... I noticed that the Netgear C3700-100NAS modem was logging many DOS errors against the same router (ASUS RT-N66U) which I was troubleshooting....
In an effort to see if the Netgear Modem was blocking what I would call "good traffic", I turned "OFF" the DOS feature on the Netgear C3700-100NAS, and everything started to work on the ASUS Router's network... the pages loaded up on all devices attached to the ASUS RT-N66U router without issues.
Looking at the logs of the NETGEAR Modem further, I realized that it appears a new firmware was loaded on the router around January 1st at 00:30:00 2016. This is around the same time that I noticed the issues. So I'm leaning towards this firmware load as the potential problem....
Since I don't think it is a very good idea to disable the DOS protection on the Modem... so here are my questions I'd like to ask netgear/comcast or an expert in the arena:
- Is the Netgear Modem's DOS feature working as designed (seems buggy)?
- If it is working as designed, why is it blocking EVERTHING coming from my ASUS RT-N66U router?
- Should I contact COMCAST or is this a NETGEAR issues
Here are some more logs from the router this afternoon and some of my notes after the //:
- [DoS attack: IP packet w/MC or BC SRC addr] from 207.46.134.255, port 443 // only has a count of "1" on occurance, and this IP Is owned by Microsoft.com
- [DoS attack: SYN Flood] from 65.52.108.11, port 443 // only has a count of "1" on occurance and this IP is owned by Microsot.com it appears
[DoS attack: Teardrop or derivative] from 192.0.104.80, port 0 //has an occurance of "16" owned by the makers of wordpress (the source/target are not even in my network which is weird why it's loading on my modem). This one seems fishy...