Network down firewall not working fine?

[Miguel]

It drops the network, when receiving DRDOS (CHARGEN) attack, I have a router asus rt-ac66u B1, with its last alpha firmware but when I launch a ddos attack it falls the entire internal and external network, some way to solve it? Formerly used another router and did not drop the network, only worked slower.

I have added a script (/jffs/scripts/ firewall-start with

#!/bin/sh
iptables -A INPUT -p udp -m limit --limit 5/s  -j RETURN
iptables -A INPUT -p udp -m limit --limit 5/s  -j LOG
iptables -A INPUT -p udp -m udp --sport 19 -j DROP

If the attack lasts 5 minutes, the wan and lan fall

I feel my english bad.

 

[sfx2000]

It drops the network, when receiving DRDOS (CHARGEN) attack, I have a router asus rt-ac66u B1, with its last alpha firmware but when I launch a ddos attack it falls the entire internal and external network, some way to solve it? Formerly used another router and did not drop the network, only worked slower.

Are you doing this from the LAN side or the WAN side?

WAN side - one should be safe as long as the Character Generator port (UDP/19) isn't exposed - which typically it is not.

 

[Miguel]

[Quote = "sfx2000, mensaje: 315.694, miembro de: 7568"] ¿Estás haciendo esto desde el lado de la LAN o la WAN?

lado WAN - uno debe ser seguro, siempre y cuando el puerto generador de caracteres (UDP / 19) no está expuesto -. que típicamente no es [/ QUOTE]
Yo uso esta web:
https://www.ipstresser.com

 

[Miguel]

Problems is DMZ (load cpu 100%) Disable DMZ and solved.