Dear all,

I am receiving UDP attack on port 53 for reference snapshot is attached right now for this i am using drop rule but problem is that my router is continuously dropping packets since last night and still doing this i dont know why this attack is not finished yet and what kind of attack is this?

i need solution that can resolve my problem

/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=ether1 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether1 protocol=tcp

Dear all,

I am receiving UDP attack on port 53 for reference snapshot is attached right now for this i am using drop rule but problem is that my router is continuously dropping packets since last night and still doing this i dont know why this attack is not finished yet and what kind of attack is this?

i need solution that can resolve my problem

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237

Sir any powerful solution for this because i am using drop rule right now

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237

Sir any powerful solution for this because i am using drop rule right now

If, your WAN is Dynamic IP Address, Contact your ISP Provider about IP changes

It's just an DDoS attack. The attacker sends DNS Request, that are resolved by your router. This results in big traffic for the target Machine, so the machine that is SOA of the DNS target (hundreds of this open resolvers get used for this).

Regards,

redflag237

Sir any powerful solution for this because i am using drop rule right now

If, your WAN is Dynamic IP Address, Contact your ISP Provider about IP changes

have static ip but now problem solve after 2 days of continuous attack maybe attacker taking some rest i am still monitoring it.

Thanks to all for suggestions and guidance which helped me a lot.