Dos

[randomName]

Does DOS still work if the firewall is turned off? And does DOS even work overall?

 

[RMerlin]

What DoS protection does is throttle certain types of connection attempts, so it requires the firewall to be running.

 

[randomName]

I'm thinking of using Wireshark to capture some addresses i'm leary of and blocking them. Will Wireshark be best to help me on this, and can I block the ip in the Web UI? ... I also have ethereal..

 

[RMerlin]

I'm thinking of using Wireshark to capture some addresses i'm leary of and blocking them. Will Wireshark be best to help me on this, and can I block the ip in the Web UI? ... I also have ethereal..

This will be an endless task if you want to do it this way.

Are you exposing any services on your WAN interface? If not, then no need to worry about it - the firewall will end up rejecting any connection attempt made to a port not part of a tracked connection.

Otherwise, a better approach is to use a blocklist. When running my FW you can easily implement such a blocklist in an efficient way through ipset. This will all require low-level work however, nothing configurable over a webui.

 

[randomName]

msg sent, pm'd

 

[randomName]

you should combine some of the functionality of wireshark into your Merlin builds,,, n call it MerlinShark!