Computer disconnecting form network (DoS attack?!)

[MrSniperTrifle]

Hi community!

Before I continue, I am no "internet guru", so my technical vocabulary is somewhat limited here 😛

I have recently set up a new wireless connection; the speeds are fantastic (full download/upload speed achieved) as well as great throughput throughout the house. The system consists of a BT FTTP (yes, I did just say fibre to the PREMISES-it's a trial in my area) modem, leading to a TP Link TL - R470T (connected by PPPoE), then leading to an Apple Time Capsule (in bridge mode).

The issue I have currently, is that my desktop (MOSTLY my desktop- my flat mate's iMac has been disconnected the odd time, but far less frequent than mine) gets disconnected very frequently (about 10 times since starting to write this post). My other devices such as an iPad or phone seem unaffected as they can refresh a webpage when my desktop is temporarily offline.

I have a great amount of faith in my Apple Time Capsule, as I have used this for over 2 years with no connection issues. It is the new TP Link router that sparks my suspicion. I have checked the logs of the TP Link router, which seem to indicate a "flood attack" along with Ping . I'll paste the full warnings below. (N.B. The IP "192.168.0.5" is my desktop address, and is the only IP which triggers the flood attack warning)

"Detected stationary source udp flood attack, dropped 177 packets, attack source: 192.168.0.5 ."
"Detected wan ping attack, dropped 26 packets."

These warnings occur every couple of hours and never occur together (as in a ping and a flood attack do not occur at the same time).

Can anyone help figure out why my desktop disconnects, and ease my mind that nobody is botnetting my pc, and screwing with my network.

Thanks in advance for your time over this matter

Many many thanks again,

Alex

 

[Shaun o]

It will because your Tp link router has flood protection turned on in the security settings.
Or that the hardware fire wall of the TP link router is set to the high setting.

Simply log into the Tp link routers firmware, and menu setup.
Turn of syn flood, or the flooding option if there is one.

Or lower the hardware firewall of the system to a medium setting over the high setting.


When a Syn flood or a Denial of service is detected or triggered on a router, it will reset the effected machine or connection to the router with the given IP address, or for a set time terminate the effected IP address the client machine was assigned by the router, or close a port.

By changing the settings in TP link router the it will resolve the disconnects. and service timeouts of Wan access to set IP`s of client machines connected to the router.

 

[MrSniperTrifle]

Hi Shaun o,

Thanks for your rapid response. I have had a look at my router's firmware, and I have noticed a multitude of options for flood defenses. Which ones of these should I turn off?

***UPDATE*** All of my devices just turned off and at the same time a "WAN Ping attack" occurred. Error:

Kind regards,

Alex

 

[DavidB6061]

Hi community!

Before I continue, I am no "internet guru", so my technical vocabulary is somewhat limited here 😛

I have recently set up a new wireless connection; the speeds are fantastic (full download/upload speed achieved) as well as great throughput throughout the house. The system consists of a BT FTTP (yes, I did just say fibre to the PREMISES-it's a trial in my area) modem, leading to a TP Link TL - R470T (connected by PPPoE), then leading to an Apple Time Capsule (in bridge mode).

The issue I have currently, is that my desktop (MOSTLY my desktop- my flat mate's iMac has been disconnected the odd time, but far less frequent than mine) gets disconnected very frequently (about 10 times since starting to write this post). My other devices such as an iPad or phone seem unaffected as they can refresh a webpage when my desktop is temporarily offline.

I have a great amount of faith in my Apple Time Capsule, as I have used this for over 2 years with no connection issues. It is the new TP Link router that sparks my suspicion. I have checked the logs of the TP Link router, which seem to indicate a "flood attack" along with Ping . I'll paste the full warnings below. (N.B. The IP "192.168.0.5" is my desktop address, and is the only IP which triggers the flood attack warning)

"Detected stationary source udp flood attack, dropped 177 packets, attack source: 192.168.0.5 ."
"Detected wan ping attack, dropped 26 packets."

These warnings occur every couple of hours and never occur together (as in a ping and a flood attack do not occur at the same time).

Can anyone help figure out why my desktop disconnects, and ease my mind that nobody is botnetting my pc, and screwing with my network.

Thanks in advance for your time over this matter

Many many thanks again,

Alex

 

[DavidB6061]

I am going to assume you are not getting automatically redirected to a "go.microsoft.com/ " address.

Have you disconnected any devices from your LAN recently? Access your router settings, make sure any box asking to show Inactive Devices is checked, then delete the Inactive Device if your router software gives you that option. If it doesn't, reset the router to the factory defaults and set up your LAN from scratch. The Hidden Device will be gone and so will your connection drops.

 

[MrSniperTrifle]

Cheers to those who contributed, but i have realised it was just a terrible router. Sent it back and using my apple on its own.

Thanks again for your time