NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
dagreek
Aug 09, 2021Aspirant
dos attack in logs
Hi, I am getting multiple dos attacks in my logs...During this time my isp modem goes offline and I lose internet... About 5 minutes later it comes back. This happens pretty much on a daily basis som...
microchip8
Aug 10, 2021Master
Most DoS attacks on NETGEAR routers are false positive (like 98-99 %) and come from legitimate companies. As a first step, you can disable logging of these attacks. If that doesn't work, you can disable DoS pprotection altogether. I run almost 4 years with DoS protection off and have yet to see something fishy
The router will not protect you if 98-99% of these are false positives but it puts a heavy strain on the firewall/iptables which is far more expensive than turning DoS logging
dagreek
Aug 27, 2021Aspirant
The issue I am having is, I lose internet from the ISP maybe once, twice or three times in a day sometimes more, All cables have been checked and re checked. New modem too... when I lose service, I look into the router logs and everytime I lose service I see all these attacks that happened seconds before I lose service... I am not a tech guy, but logic and other people (techs) tell me that when it floods the ip address with attacks the modem will just kick offline.. Turning off logging in my opinion is like sticking your head in the sand...
- michaelkenwardAug 27, 2021Guru - Experienced User
dagreek wrote:
I am not a tech guy, but logic and other people (techs) tell me that when it floods the ip address with attacks the modem will just kick offline..
Read the earlier messages again.
Nothing is flooding you with attacks. Netgear has written firmware that flags up this innocent traffic (from the like of Google, Amazon, Facebook and others) as DoS attacks. Think of it as the router equivalent of crying wolf.
dagreek wrote:
Turning off logging in my opinion is like sticking your head in the sand...
Turning off logging is no such thing. It is just telling your router to ignore these false alarms.
Turning of logging also means that your router's processor does not bust a gut and stop working because it is tied up handling this noise.
The choice is yours. Live with the disconnections or turn off the pointless messages that may cause them.
Had we advised you to "disable DoS protection" you might have a point.. But in reality many people do exactly that and experience no harmful effects. I have never felt the need to do that because my router doesn't fall over.