We also watch for those kinds of connections Ron.  It's almost always a virus.  Sometimes a file sharing program though those are usually limited to 20 or so connections.
 
Marlon
(509) 982-2181                                   Equipment sales
(408) 907-6910 (Vonage)                    Consulting services
42846865 (icq)                                    And I run my own wisp!
64.146.146.12 (net meeting)
www.odessaoffice.com/wireless
www.odessaoffice.com/marlon/cam
 

 
----- Original Message -----
Sent: Monday, July 31, 2006 8:32 PM
Subject: Re: [WISPA] I need Mikrotik Help

Thanks John, I have noticed that many of them from one user are in sequence everyother number nnnn2,4,6,8, for example in the destination addr. I'll have a look at that.

>-----Original Message-----
>From: John J. Thomas [mailto:[EMAIL PROTECTED]
>Sent: Monday, July 31, 2006 09:36 AM
>To: 'WISPA General List'
>Subject: Re: [WISPA] I need Mikrotik Help
>
>
>How many is "some"? They may be boxes that have been compromised with a worm, trojan, virus or spyware. Look closely at the destination ports they are connecting to. If the addresses/ports are in sequence, they may have malware on their PC.
>
>John
>
>>-----Original Message-----
>>From: Ron Wallace [mailto:[EMAIL PROTECTED]
>>Sent: Monday, July 31, 2006 04:24 AM
>>To: [EMAIL PROTECTED], wireless@wispa.org
>>Subject: [WISPA] I need Mikrotik Help
>>
>>To all,
>>
>>I have some abusive users, when I look at IP Firewall Connections I find a some users with over a hundred (100) instances listed in the source address column. I think its flooding my network. I have 2 T1's and 81 users. We're growing faster than I can install new customers.
>>
>>I am using Canopy 900, Canopy 2.45, & Tranzeo 2.45. I have activated the SM, SNMP, BOOTP Server and Client filters on the canopy devices.
>>
>>How can I limit the number of active instances of these abusive users on the Mikrotik?
>>
>>Ron Wallace
>>Hahnron, Inc.
>>220 S. Jackson Dt.
>>Addison, MI 49220
>>
>>Phone: (517)547-8410
>>Mobile: (517)605-4542
>>e-mail: [EMAIL PROTECTED]
>>[EMAIL PROTECTED]
>>
>>
>
>
>--
>WISPA Wireless List: wireless@wispa.org
>
>Subscribe/Unsubscribe:
>http://lists.wispa.org/mailman/listinfo/wireless
>
>Archives: http://lists.wispa.org/pipermail/wireless/
>


--
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/
-- 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/

Reply via email to