Business Community > Routers > Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
< Routers

Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)

Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)

Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
2024-01-02 10:12:46 - last edited 2024-01-04 09:59:04
Model: ER8411   ER605 (TL-R605)  
Hardware Version: V1
Firmware Version: 1.2.0 Build 20231214 Rel.77035

Hello, 

 

yesterday we have update all our switches and routers. Since the update we get every 10 minutes the message with: 

 

Detected TCP SYN packets attack and dropped 138 packets.

 

Update has been done at 00:30 CET therefore since this time we have get a lot of messages. The problem is that no more information is given this means we can not understand ist this a local device or an attack from outside. Is there any possible way to find the issue, device etc. which is responsible for this attacks?

 

Many thanks in advanced! 

 

  1      
 
  1      
 
#1
Options
1 Accepted Solution
Re:Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)-Solution
2024-01-04 09:58:59 - last edited 2024-01-04 09:59:04

Hi @Cij@Cotchet 

Thanks for posting in our business forum.

Here's the fix.

https://community.tp-link.com/en/business/forum/topic/636216?replyId=1300898

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
Recommended Solution
  0  
  0  
#3
Options
5 Reply
Re:Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
2024-01-04 08:00:22

  @Cij Up, I have the same issue since update ER8411 in 1.2.0

  0  
  0  
#2
Options
Re:Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)-Solution
2024-01-04 09:58:59 - last edited 2024-01-04 09:59:04

Hi @Cij@Cotchet 

Thanks for posting in our business forum.

Here's the fix.

https://community.tp-link.com/en/business/forum/topic/636216?replyId=1300898

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
Recommended Solution
  0  
  0  
#3
Options
Re:Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
2024-01-04 10:31:13

  @Clive_A  Thanks for your suggestion. I have already see this solutions but at the moment i'm trying to decide whether this affects safety. Opinions differ widely here too. Do you have an opinion on this? Is this setting /block new with the last upgrade or why I geting the message now and not before?

 

Maybe TP-Link can add a option to the notification section to activate or deactivate notification for this kind of attacks? 

 

Thanks

  0  
  0  
#4
Options
Re:Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
2024-01-05 06:25:22

  @Clive_A 

I would also be interested to know whether this does not affect safety. Am I deactivating a security function just so that I no longer receive a notification? Do I understand that correctly?

Thank you very much

  1  
  1  
#5
Options
Re:Detected TCP SYN packets attack Since Firmware update to for ER8411 (1.2.0) and ER6505 (2.2.3)
2024-01-05 06:42:02

Hi @Tpexe 

Thanks for posting in our business forum.

Tpexe wrote

  @Clive_A 

I would also be interested to know whether this does not affect safety. Am I deactivating a security function just so that I no longer receive a notification? Do I understand that correctly?

Thank you very much

You might find this article helpful.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  1  
  1  
#6
Options

Information

Helpful: 1

Views: 376

Replies: 5

Related Articles
Detected TCP SYN packets attack and dropped - every 10 minutes
289 0
ER605 2.1.3 Beta - TCP SYN Packet Attack.
503 0
ER7212PC - "Router Detected TCP SYN packets attack and dropped xxx packets" every ten minutes.
2083 2
Detected TCP SYN-and-FIN packets attacked and dropped packets
105 0
Router Omada Detected TCP SYN packets attack and dropped xxx packets every 10 minutes, 24/7
3010 3
TCP SYN packets attack
612 0
About Us
Press
Copyright © TP-LINK CORPORATION PTE. LTD. All rights reserved.