Netgate SG-1000 microFirewall

Author Topic: ipV6 flood  (Read 182 times)

0 Members and 1 Guest are viewing this topic.

Offline xkaas

  • Newbie
  • *
  • Posts: 9
  • Karma: +0/-0
    • View Profile
ipV6 flood
« on: February 04, 2018, 02:09:12 pm »
Hi

Here's a quick screenshot of the logs:
http://prntscr.com/ia34uj

This is flooding my network, and making it slow and unstable.


I have tried to block all IPv6 traffic, but no luck.

I also block ping requests against that particular ipv4 ip. Nothing.

What can I do?

Offline Harvy66

  • Hero Member
  • *****
  • Posts: 2324
  • Karma: +213/-12
    • View Profile
Re: ipV6 flood
« Reply #1 on: February 04, 2018, 02:53:01 pm »
I wonder if the pinging is harming your network or the logging is. Just looking at the screenshot, it's like 2-3 pings per second.

Online JKnott

  • Hero Member
  • *****
  • Posts: 1207
  • Karma: +53/-11
    • View Profile
Re: ipV6 flood
« Reply #2 on: February 04, 2018, 04:33:22 pm »
Perhaps I'm missing something, but I only see one IPv6 item and all the rest IPv4. 

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 9824
  • Karma: +1111/-311
    • View Profile
Re: ipV6 flood
« Reply #3 on: February 05, 2018, 12:47:44 am »
That is an insignificant amount of traffic to be fingered as causing any kinds of slowdown.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM

Offline xkaas

  • Newbie
  • *
  • Posts: 9
  • Karma: +0/-0
    • View Profile
Re: ipV6 flood
« Reply #4 on: February 06, 2018, 01:30:43 pm »
Hi anyone.

Yes. You guys were right. That is nothing.


Take a look at this screenshot:
http://prntscr.com/ib1rwk


You see - That isnt alot of traffic either, However, its enough to slow my firewall down.

The actual pipe only uses a few mbits of traffic. The stable table size is on 500.

I use PFBlocker to block these connections. I cannot change the port, as its used for a game service.

Is there anyway, I can minimize the impact? I guess its just quite large packets its sending.

I've been thinking about upgrading the firewall with a way better CPU. Would that help my issue?

I am unsure, if this is not what is causing the lagg. As I have a device connected to the network that is not going through the PFsense box which is working just fine, and a speedtest also shows around the speeds I pay for. Therefore, I am pretty sure its the box itself getting bombed with something. CPU sometimes spikes from 10% to 50% then down again slowly. Up and down.


Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 9824
  • Karma: +1111/-311
    • View Profile
Re: ipV6 flood
« Reply #5 on: February 06, 2018, 02:27:51 pm »
Hi anyone.

Yes. You guys were right. That is nothing.


Take a look at this screenshot:
http://prntscr.com/ib1rwk


You see - That isnt alot of traffic either, However, its enough to slow my firewall down.

No, it is not.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!
Do Not PM For Help! NO_WAN_EGRESSTM