Firewalla Becomes Unusable When DDoS

Follow

Kyle

• July 28, 2022 22:08

Two IPs from OVHcloud were sending about 200 requests per minute to Firewalla making it unresponsive. I tried resetting to factory settings and starting over and renewing my IP but it didn't seem to stop it. My entire network came to a halt and was unusable. I have had to stop use of Firewalla Purple. 

0

• 

  Kyle

  • July 28, 2022 22:20

  Appears to be similar to this but I would get about 200+ requests per minute. When I disconnect Firewalla from my ISP, I would be able to access the Firewalla again. 
  
  Even weirder, when I connect to a different ISP the problem goes away. It seems like my 1st ISP is pointing the attackers (or legit traffic? Maybe they are selling my network info?) to my IP address. 
  
  

  I tried disconnecting all of my devices and adding them one by one but it appears that Firewalla or my ISP is the culprit. 

   

  0

  Comment actions Permalink
• 

  Firewalla

  • July 29, 2022 02:33
  • Edited

  Do you mean 200 packets per second? or scans? if it is, and it is slowing you down, your WAN should be very slow.

  Assuming the packet size is 1280 bytes * 200 = 256k bytes = 2 Mbits ..., so if your download speed is near this, you will have an issue. If not, there may be other problems.  (Firewalla itself can handle full gigabit ...)

  If your network is much faster than 2Mbits, then the problem is somewhere else. You may want to look over this https://help.firewalla.com/hc/en-us/articles/360053534593-How-to-debug-network-connectivity-issues- or contact support help@firewalla.com

  0

  Comment actions Permalink
• 

  Kyle

  • October 05, 2022 02:37

  The issue goes away when I turn block all incoming off, the Purple could keep up before. That no longer seems like it's the case.

  0

  Comment actions Permalink

Please sign in to leave a comment.