This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

TCP Port 53 - 24,000 Packets Dropped in 3hrs - Network Down

I have experience an issue recently. The whole network went down. I generated an Executive Summary Report & noticed that more than 24,000 packets were dropped by TCP Port 53 in 3hrs. I think that cause the failure of Astaro.

Any ideas or advices anyone?

Regards,
Frenchie

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 15 years ago

Port 53 is DNS. Usually UDP is used, but TCP usage will now be more common with DNSSEC gaining steam.

Are you running DNS servers by chance and if so, did you add them to the Performance Tuning section of the IPS on the advanced tab? Are the source or destination of the dropped packets DNS servers under your control?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 FrenchiiLaf over 15 years ago in reply to Scott_Klassen

Hey Scott,

Thanks for your reply. Yes I find out that Port 53 is related to DNS. Yes I put my DNS server under "Perfomance Tuning". I was wondering if the network did not suffer from a DoS attack. I am hesitating to use the TCP SYN Flood Protection under "Anti-DoS/Flooding". What do you reckon?

Regards,
Frenchie
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FrenchiiLaf over 15 years ago in reply to Scott_Klassen

Hey Scott,

Thanks for your reply. Yes I find out that Port 53 is related to DNS. Yes I put my DNS server under "Perfomance Tuning". I was wondering if the network did not suffer from a DoS attack. I am hesitating to use the TCP SYN Flood Protection under "Anti-DoS/Flooding". What do you reckon?

Regards,
Frenchie
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data