In reply to a post by trolleybus:

Draytek Vigor2865

The Firewall rules for DOS Defence are all ticked,

That's where you're probably going wrong. These things cause all sorts of unexplained and unintended problems. I'd advise turning it all off unless you understand exactly what those features do. They are designed for business networks really and consumer stuff (playing games, etc, etc) can trigger them protections. By all means do some reading up online about the topic. I have it all turned off on my Draytek.

In reply to a post by trolleybus:

My be a country blocking would be better.

Maybe.

31.43.192.166 Russia
94.247.61.201 Russia
117.6.130.51 Vietnam
95.154.33.134 Denmark
183.105.163.42 South Korea
86.125.18.166 Romania
176.36.109.230 Ukraine
188.25.82.228 Romania
91.150.81.203 Serbia
113.176.70.49 Vietnam

Not that I give much credence to GeoIP

Edited by DFScale (Thu 20-Feb-25 13:31:08)

Thanks to all who responded. I have been given some useful suggestions of the way forward to stem the flow of unwanted error messages to my Inbox. Will try to work out which is the most sensible route forward.

Hi,

FTR, If I was you, I would set up a dedicated email address away from my main email address where my router could send these type of email without it filling up my main email Inbox. This is what I do with the job hunting websites I sign up to. I have a completely separate email address for those sites so that when they send out their automated email it's not filling up my main Inbox.

HTH,

In reply to a post by Pheasant:

The router is doing its job…

https://www.draytek.co.uk/support/guides/kb-denial-o...

As said you may want to switch of the syslog function that sends you these alerts to your email. You can continue to monitor the syslog entries directly on the router, without having your inbox fill up.

https://www.draytek.co.uk/support/guides/kb-vigor-sy...

This. These are already blocked and are background noise. No-one is interested in DDoSing you and if they did either your connection would fill or your router would fold like tin foil in fhe face of a serious attack if you've the bandwidth for it to land.

So a similar response to when you asked about blocking traceroute. This DDoS protection is largely pointless, your router will drop anything not belonging to an existing session immediately unless you're port forwarding and they attack there. Receiving any emails for firewall drops of any kind is pointless unless hosting stuff on the connection and seeing sustained attacks on the server, which will be logged on the server anyway..