NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
dos attack in logs
Hi, I am getting multiple dos attacks in my logs...During this time my isp modem goes offline and I lose internet... About 5 minutes later it comes back. This happens pretty much on a daily basis som...
Most DoS attacks on NETGEAR routers are false positive (like 98-99 %) and come from legitimate companies. As a first step, you can disable logging of these attacks. If that doesn't work, you can disable DoS pprotection altogether. I run almost 4 years with DoS protection off and have yet to see something fishy
The router will not protect you if 98-99% of these are false positives but it puts a heavy strain on the firewall/iptables which is far more expensive than turning DoS logging
microchip8 is spot on about these log entries. I step in only to add another thing to look for.
As they say
microchip8 wrote:
Most DoS attacks on NETGEAR routers are false positive (like 98-99 %) and come from legitimate companies.
You can have fun by checking that out.
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
As microchip8 says, you can also disable DoS protection if you still have problems.