Detected TCP SYN packets attack and dropped - every 10 minutes

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Detected TCP SYN packets attack and dropped - every 10 minutes

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Detected TCP SYN packets attack and dropped - every 10 minutes
Detected TCP SYN packets attack and dropped - every 10 minutes
2023-11-08 19:48:44 - last edited 2023-11-10 07:09:06
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.2.2
Hello.
I have the latest version of frimware installed, number 2.2.2 Build 20231017 Rel.68869, I have an external IP address and in the logs every 10 minutes there is an entry " [3C-52-A1-F6-27-E8] Detected TCP SYN packets attack and dropped 290 packets "
How to turn it off or block it and how to prevent it from showing up?
I have an ER605v2 router without a controller connected directly to the switch.

 
  0      
  0      
#1
Options
1 Accepted Solution
Re:Detected TCP SYN packets attack and dropped - every 10 minutes-Solution
2023-11-09 02:27:23 - last edited 2023-11-10 07:09:06

Hi @djwujek 

Thanks for posting in our business forum.

Would recommend you take a look at this. Currently, the firmware does not support showing the attack IP. But the ACL can block it by Wiresharking its IP address.

https://community.tp-link.com/en/business/forum/topic/636216

 

Or you can refer to this to turn off the block: Solution Solution to ER605 V1 1.3.0 Firmware Got Many Logs of "TCP no-Flag attack" Issue

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  0  
  0  
#2
Options
1 Reply
Re:Detected TCP SYN packets attack and dropped - every 10 minutes-Solution
2023-11-09 02:27:23 - last edited 2023-11-10 07:09:06

Hi @djwujek 

Thanks for posting in our business forum.

Would recommend you take a look at this. Currently, the firmware does not support showing the attack IP. But the ACL can block it by Wiresharking its IP address.

https://community.tp-link.com/en/business/forum/topic/636216

 

Or you can refer to this to turn off the block: Solution Solution to ER605 V1 1.3.0 Firmware Got Many Logs of "TCP no-Flag attack" Issue

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  0  
  0  
#2
Options