Firefall gets flooded with UDP packets.

[X-otic]

Hi all, I've searched the board for my problem, but I haven't found any... Anyhow, here's whats going on:

For about a week or two now, my Internet is falling out. For 10 seconds I cannot longer work on the Internet. So everytime this happens, I restart our ADSL modem. Now I found something in the logs of our firewall, that's in our router.

DoS udp_flood block [teamspeakip]:8767 > [my_ip],35159 PR udp len 20 25
DoS udp_flood block [teamspeakip]:8767 > [my_ip],35159 PR udp len 20 359
So basically what's going on is that the firewall THINKS it is experiencing a DDoS attack. When it thinks this, it shuts down the whole internet for 10 seconds. After that, I just can talk further on teamspeak, and game on with MoH:AA. The Firewall only does this, when it's receiving 300 packets per second, and that for 6 seconds. First it was 10 seconds before I found out, but decreasing this time doesn't make any difference: it still happens. So when there are 300 udp packets per seconds coming in, for 6 seconds, the Internet will be shut down for like 10 seconds. This is way annoying when you're in a war...

Are there anymore people with this problem? And maybe it is an issue to check before release of the next teamspeak client/server (server probably) :)

I'm not intended to shut this down, because we ARE running a webserver here at our place, and that one has to be accessible at any time to anyone...

Plz help :(

[JD]

Haha, now THAT is the way to address a problem - I hope that Steve-E guy reads this :P.

Sorry though, I haven't the slightest idea of why that happens and obviously not a solution. I might suggest getting a less-strict router/firewall maybe? It sounds to me that it is so secure it should be used in some software engineering company or Valve... ;)

Good luck with the problem, it is the first I have read of it so I don't doubt you when you say the search resulted with null.

[guldi]

that does not sound like a TS problem. Any Router / Firewall problems should not be discussed here. This forum is a TS only tech. forum.

[m&m's]

can you open the ports in your firewall for t-s to use so the router will allow it all the time and not block the port for the 10 seconds ? nice post but you did not say if you opened the udp ports required by t-s . if not do so client needs 8767 udp and server needs 51234 try then if there not allready bypassed in your firewall ...