<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Remove DNS function from your router<br><br>Envoyé de mon iPad Air</div><div><br>Le 24 févr. 2016 à 23:33, Folarin Oluwafemi <<a href="mailto:folarin077@gmail.com">folarin077@gmail.com</a>> a écrit :<br><br></div><blockquote type="cite"><div><div dir="ltr"><div style="font-size:12.8px">Hello Group Members,</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">I recently did BGP peering with my upstream provider and everything was fine until a few days </div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">time when i observe strange traffic from the interface of my WAN.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">What i saw using torch tool (network real-time monitor) on Mikrotik was traffic hitting my WAN</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">interface from IP prefix from unknown locations hitting my router for DNS service that i can't </div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">explain..</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">I disabled my LAN Public IP block of <a href="http://196.13.111.0/24" target="_blank">196.13.111.0/24</a> and observed keenly the scenario and still </div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">observed high traffic coming in.</div><div style="font-size:12.8px"> </div><div style="font-size:12.8px">Because of this act, i have not been able to enjoy good internet service from my provider.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Any filtering mechanism that can be used or how this attack can be mitigated.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Attached is the snapshot of what am refering to.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px"><b>ETHER 5 is the interface facing my ISP </b></div><div style="font-size:12.8px"><b><br></b></div><div style="font-size:12.8px"><b>ETHER 3 is my LAN interface <a href="http://196.13.111.0/24" target="_blank">196.13.111.0/24</a> disabled<br clear="all"></b><div><br></div></div><div><span style="font-size:12.8px">I need assistance from the group in helping out.</span><br></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Regards.</span></div>-- <br><div class="gmail_signature"><font style="color:rgb(0,0,0)" size="2"><span style="font-family:Tahoma;font-weight:bold">I am what God says I am<br></span></font></div>
</div>
</div></blockquote><blockquote type="cite"><div><2016-02-20.png></div></blockquote><blockquote type="cite"><div><2016-02-21 (1).png></div></blockquote><blockquote type="cite"><div><2016-02-21.png></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>afnog mailing list</span><br><span><a href="https://www.afnog.org/mailman/listinfo/afnog">https://www.afnog.org/mailman/listinfo/afnog</a></span></div></blockquote></body></html>