Page 1 of 1

TCP RST LEN 40 on different ports any attack?

Posted: Wed Mar 06, 2019 11:58 pm
by kokaKorina
Hello everyone I just put some firewall rules input chain and dropped all invalid packets and accepted only established and related connection. If I log the packets dropped I see random TCP RST packets on random ports hitting my routers public ip. Those ip addresses are not even from the region where I am. DNS remote requests are not allowed. What can be the reason?Is this any kind of attack?