DoS attacks in log

---

michaelkenward wrote:

---

microchip8 wrote:

Given the amount of false positives, I question michaelkenward claim that the router will protect you if DoS is turned on.

---

Who said that? Read it again.

 

First you probably mean "off".

 

I did not say that you should turn off "DoS". What I suggested was disabling the logging of Known DoS attacks and Port Scans.That is on the Logs page of the controls.

 

Here's the exact wording I used:

 

Disable logging of DoS attacks and see if that reduces the problem.

Emphasis added.

 

This is not the same as Disable Port Scan and DoS Protection which appears on a completely different WAN Setup page in the router's controls.

 

In the same way, disabling the logging of Router operation (startup, get time etc) does not mean that you are turning off router operation.

---

"If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs."

Your words. 

Blocking with iptables is more expensive than logging. Turning off loging and the amount of false positives will not "protect" you from anything much. You may relieve the CPU by turning loging off, but iptables is still there putting a strain on the CPU.