There you go.
----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP ----- Original Message ----- From: "Jason McKemie" <[email protected]> To: [email protected] Sent: Tuesday, September 6, 2016 12:11:05 PM Subject: Re: [AFMUG] Mikrotik Possibly Compromised Looks like a lot of the connections are port 53. On Tue, Sep 6, 2016 at 11:59 AM, Mike Hammett < [email protected] > wrote: Torch? ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP From: "Jason McKemie" < [email protected] > To: [email protected] Sent: Tuesday, September 6, 2016 11:57:33 AM Subject: [AFMUG] Mikrotik Possibly Compromised So I've noticed some strange behavior on my home connection (Comcast). The Mikrotik that I am using shows a constant Tx on the WAN port of around 3-5Mbps and between 200-300pps, Rx is just a few kbps. This activity appears to be strictly on the WAN port. If I disable a firewall rule that accepts input, the activity ceases - but devices behind the router lose connectivity. Any ideas? I've got all IP services disabled except winbox, which is restricted to my local network.
