Xmas attack

June 21, 2009 at 11:32:43
Specs: Windows Vista

I have D-link router model DIR-300 with the latest firmware. Almost everyday, when I check log of my router I can see:

Xmas port scan attack from WAN (ip: detected.

I use all protection I can - only computers with selected MAC address can access my network, firewall rules are set up, WAN ping is disabled, remote managment is disabled, etc. Although my firewall protects me well, that Xmas attack slows down my router. I can create some firewall rules and deny specific ip address but I do not know how to use them.


I would like to ask whether I can do something to prevent my router from being attacked all the time.

Thank you

See More: Xmas attack

Report •

June 21, 2009 at 12:20:11
Ignore it; it's harmless.

Report •

June 21, 2009 at 12:22:52
Yep it is, but it often slow down my router cpu and I have big delay.

Report •

June 21, 2009 at 12:28:45
Well, there's not much you can do about it. Such background static pollutes the Internet, and happens regardless of what you do. If it's crippling your router, I'd suggest buying a better router.

Also, sometimes routers just overheat. Have you tried having a fan blow on said router?

Report •

Related Solutions

June 22, 2009 at 00:34:32
All right, I will put the router on a better place. Hope that it will solve my problem :-) By the way, I never thought that router can actually overheat while working in normal conditions.

Report •

June 23, 2009 at 12:37:08
Have you ever configured your router settings to boost the signal? If so, that can cause the unit to run hotter. If you have, you might want to cut it back. If not, then it must be something else.

1 Corinthians 15:3-4

Report •

June 23, 2009 at 13:33:01
So, the router is not overheating, it is not even hot, but quite cold. I tried to set up firewall rules but I do not know how to set them up correctly. I have selected attacker's IP to be source (WAN) but I do not know what should I write into destination gap and I cannot leave it blank.

By the way, do you think that firewall rules can actually affect "connections" which does not enter my network, just scan it?

Report •

June 23, 2009 at 17:31:39
No, firewalls cannot stop a probe. A firewall can (and does) prevent a probe from detecting anything, but it cannot deter the probe itself.

Report •

Ask Question