Quote:
Originally Posted by LishTish
well here are part the log files from last nigth and i dont know for sure what is going on
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:30:2a:73:40:00:6b:06:a5:8b:4f:28 SRC=79.40.27.16 DST=74.69.139.76 LEN=48 TOS=00 PREC=0x00 TTL=107 ID=10867 DF PROTO=TCP SPT=53079 DP
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:30:2a:74:40:00:6b:06:a5:8a:4f:28 SRC=79.40.27.16 DST=74.69.139.76 LEN=48 TOS=00 PREC=0x00 TTL=107 ID=10868 DF PROTO=TCP SPT=53081 DP
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:30:36:06:40:00:72:06:ac:7c:59:65 SRC=89.101.247.78 DST=74.69.139.76 LEN=48 TOS=00 PREC=0x00 TTL=114 ID=13830 DF PROTO=TCP SPT=1101 D
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:30:36:05:40:00:72:06:ac:7d:59:65 SRC=89.101.247.78 DST=74.69.139.76 LEN=48 TOS=00 PREC=0x00 TTL=114 ID=13829 DF PROTO=TCP SPT=1102 D
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:34:44:97:40:00:6c:06:da:cf:6d:96 SRC=109.150.172.53 DST=74.69.139.76 LEN=52 TOS=00 PREC=0x00 TTL=108 ID=17559 DF PROTO=TCP SPT=64467
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:30:44:9f:40:00:6b:06:db:cb:6d:96 SRC=109.150.172.53 DST=74.69.139.76 LEN=48 TOS=00 PREC=0x00 TTL=107 ID=17567 DF PROTO=TCP SPT=64466
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:1 8:00:34:55:6b:40:00:6b:06:32:37:56:91 SRC=86.145.91.231 DST=74.69.139.76 LEN=52 TOS=18 PREC=0x00 TTL=107 ID=21867 DF PROTO=TCP SPT=58995
Jul 20 12:36:20 router daemon.info ulogd[2920]: IPTABLES SYN-FLOOD: IN=vlan1 OUT= MAC=00:13:8f:bf:3a:89:00:0a:42:6d:20:21:08:00:45:0 0:00:34:56:b1:40:00:6f:06:18:e7:4f:dd SRC=79.221.118.189 DST=74.69.139.76 LEN=52 TOS=00 PREC=0x00 TTL=111 ID=22193 DF PROTO=TCP SPT=2613
|
your iptables need to b edited so it wont allow the same connection so fast, if your running on a home network it should prob be edited to 1 connection per min if any connection goes over that it will drop the SYN request, if your on a server your paying for monthy SYN floods shouldnt even b able to work on them, if anyone has better network experience maybe they can explain it better than me.