Sounds like open DNS server ☺
Thanks, Dennis Burgess – Network Engineer/Consutant MikroTik Certified Trianer/Consultant<http://www.linktechs.net/productcart/pc/viewcontent.asp?idpage=5> – MTCNA, MTCRE, MTCWE, MTCTCE, MTCINE Cambium ePMP Certified, Telrad Certified, Cisco CCNA For Wireless Hardware/Routers visit www.linktechs.net<http://www.linktechs.net/> RF Mapping: www.towercoverage.com<http://www.towercoverage.com/> Office: 314-735-0270 dmburg...@linktechs.net<mailto:dmburg...@linktechs.net> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Jason McKemie Sent: Tuesday, September 6, 2016 11:58 AM To: af@afmug.com Subject: [AFMUG] Mikrotik Possibly Compromised So I've noticed some strange behavior on my home connection (Comcast). The Mikrotik that I am using shows a constant Tx on the WAN port of around 3-5Mbps and between 200-300pps, Rx is just a few kbps. This activity appears to be strictly on the WAN port. If I disable a firewall rule that accepts input, the activity ceases - but devices behind the router lose connectivity. Any ideas? I've got all IP services disabled except winbox, which is restricted to my local network.
