If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
Re: Why over 200 smurf attack packets from Comcast IP's within a day.
False positives. NG is famously known for that. Either disable logging of these or completely disable DoS protection.
And yes @michaelkenward processing/dropping/blocking at iptables levels is far more expensive than just logging somme entries in the logs
Besides, what's the point keeping it on if 85-90% are false positives? The rest 10-15% is just yoour regular spambots testing trying to get in. It's useless
Besides, what's the point keeping it on if 85-90% are false positives? The rest 10-15% is just yoour regular spambots testing trying to get in. It's useless
Re: Why over 200 smurf attack packets from Comcast IP's within a day.
Protection. Logs just get spammed by false positives. In my 22 years of Linux experience and particulary iptables/nftables, I can 100% assure you iptables/nftables takes way more prcessing power than writing some lines to the log. Yes, the log uses a % or so but nowhere near the amount of iptables/nftables.
