Re: Connection Count -

2012-08-19 Thread Reindl Harald
Am 18.08.2012 21:49, schrieb Heinz Diehl: > On 18.08.2012, Bob Goodwin - Zuni, Virginia, USA wrote: > >>As I said I also have a router running tomato v. 1.28. I am looking >>at it now. "QOS" it is not obvious to me which menu item can track >>connections or how to configure it? > >

Re: Connection Count -

2012-08-19 Thread Reindl Harald
Am 18.08.2012 23:19, schrieb Heinz Diehl: > On 18.08.2012, Reindl Harald wrote: > >> this sounds more like enable DNS-resolution which may be >> dangerous to self-dos if i understand it right > > There's a max. limit of connections (4096; in my case it's 1024), > which is far too low to harm,

Re: Connection Count -

2012-08-19 Thread Bob Goodwin - Zuni, Virginia, USA
On 19/08/12 06:50, Heinz Diehl types: Bob observed a rapidly increasing connection counter on his router running dd-wrt. Having a look at what the QoS connection-tracker reports makes visible if the increased connection-rate is due to outgoing connections, so in fact it does contribute to getting

Re: Connection Count -

2012-08-19 Thread Heinz Diehl
On 19.08.2012, Reindl Harald wrote: > if it is DNS-rverse-lookup 4096 is a LARGE count Sure it is reverse lookups which are performed here. The router logs the ip-adresses and resolves them on demand. > try netstat without and with reverse-lookups > there are very few cases where it doe snot hu

Re: Connection Count -

2012-08-18 Thread Heinz Diehl
On 18.08.2012, Reindl Harald wrote: > this sounds more like enable DNS-resolution which may be > dangerous to self-dos if i understand it right There's a max. limit of connections (4096; in my case it's 1024), which is far too low to harm, so there's no danger here. The main purpose is to track

Re: Connection Count -

2012-08-18 Thread Bob Goodwin - Zuni, Virginia, USA
On 18/08/12 15:49, Heinz Diehl types: On 18.08.2012, Bob Goodwin - Zuni, Virginia, USA wrote: As I said I also have a router running tomato v. 1.28. I am looking at it now. "QOS" it is not obvious to me which menu item can track connections or how to configure it? Log into your rou

Re: Connection Count -

2012-08-18 Thread Heinz Diehl
On 18.08.2012, Bob Goodwin - Zuni, Virginia, USA wrote: >As I said I also have a router running tomato v. 1.28. I am looking >at it now. "QOS" it is not obvious to me which menu item can track >connections or how to configure it? Log into your router, go to "Qos" and "View Details" t

Re: Connection Count -

2012-08-18 Thread Bob Goodwin - Zuni, Virginia, USA
On 18/08/12 13:04, Heinz Diehl types: On 18.08.2012, Bob Goodwin - Zuni, Virginia, USA wrote: Whatever is going on it's worrisome, I do little "surfing" and have no MS Windows. I have installed fail2ban in the last hour. As far as I know, dd-wrt does only count the connections, but not

Re: Connection Count -

2012-08-18 Thread Heinz Diehl
On 18.08.2012, Bob Goodwin - Zuni, Virginia, USA wrote: >Whatever is going on it's worrisome, I do little "surfing" and have >no MS Windows. I have installed fail2ban in the last hour. As far as I know, dd-wrt does only count the connections, but not what direction they are coming from,

Connection Count -

2012-08-18 Thread Bob Goodwin - Zuni, Virginia, USA
The router on this F-17/64 bit computer runs DD-WRT. Under Status > LAN > Active Clients there are columns for "Conn. Count" and "Ratio [4096]." I am viewing that page on box7. When box9 [F-17/64] is running Conn. Count increases from a one or two digit number to three digits, e.g