Re: [Sheflug] OT Router problem

[Richard Ibbotson <richard@xxxxxxxxxxxxxx>]

On Wednesday 21 July 2010 21:49:11 Steve Fisher wrote:
> On 21 July 2010 21:38, Richard Ibbotson <richard@xxxxxxxxxxxxxx> 
wrote:
> > On Wednesday 21 July 2010 17:00:41 Douglas G Mckendrick wrote:
> > > 07/21/2010  15:54:25 **UDP Flood to Host** 86.27.30.174,
> > > 32768->> 194.168.8.100, 53 (from ATM1 Outbound)
> > > 07/21/2010  15:54:25 **UDP Flood to Host** 86.27.30.174,
> > > 32768->> 194.168.4.100, 53 (from ATM1 Outbound)
> > 
> > Hmm... bit weird.  Port 53 = DNS. Flood = lot of it.  Might be a
> > DNS loop. Not quite sure what kind of bug or fault could cause
> > that. Anyone else ?

 
> So thats a Virgin Media address?, sounds like a UDP DoS attack
> http://en.wikipedia.org/wiki/UDP_flood_attack

I was thinking something like that but didn't want to make any claims 
without standing on top of the router.  Firmware upgrade or new router 
might be a good idea.  Doesn't cost much to buy a new one...

www.misco.co.uk 

Plenty of other places out there.

-- 
Richard

_______________________________________________
Sheffield Linux User's Group
http://sheflug.org.uk/mailman/listinfo/sheflug_sheflug.org.uk
FAQ at: http://www.sheflug.org.uk/mailfaq.html

GNU - The Choice of a Complete Generation