PDA

Bekijk de volledige versie : client jammed the internet



rexster
28-05-2005, 10:26
after running fine for a week, the whole wireless network and also wired cant connected to the internet.

after investigation, found out that there're clients somehow jammed the connection.

got 3 belkin clients that if they connected then the whole internet jammed
but when the they unplug the usb wifi, everything running fine.

real weird. what could be the cause?

still checking,but the hardware seemed worked fine on other pc.

any ideas ?

tia.

macsat
28-05-2005, 14:21
Hi

The Belkin ones shouldnt happen to be 802.11b clients?

I have seen something simular before, where b and g clients on the same network, tend to "break" the network.

rexster
30-05-2005, 04:14
the belkin is 54g usb wifi.

but, i guess that's not the problem.
because, there are others using the same device (belkin 54g usb) but not causing problem.
and there're also others that using 11b devices (dlink and linksys) and no one cause any problems.

my guess is either the unit damaged or the computers full of virus that continuesly broadcast to try to infect all other system.

one more thing. i found out that the usb client cause the problem only when connect to the linksys wrt54g as a repeater for wl500g.
when it connect directly to wl500g, it doesnt cause a problem.

still cant figure out why...?
very confusing...

rexster
30-05-2005, 07:21
it's confirmed that the pc is the problem.
not the usb device.

i try plug the suspected usb device on other pc, it works fine.
then i try plug other usb device on suspect pc. the internet jammed again.

most probably, it's virus or somekind that continuesly broadcast itself and make the whole connection jammed.


it happened even that i'd enable bandwidth management and limits downlink/uplink on the web interface. also using wshaper on post-firewall.
(i guess other wireless client should get enough bandwidht for each of them and wont be able to jammed whole internet???)


is there anything we can do on the wl500g router or on wrt54g (coz, both linux inside) to block these kind of thing?

so, any kind of attack should not jammed the internet.

at least, a way to limit maximum connection from each client?


---
added:
i think i might just found a way to limit maximum total connection.
it's in the firewall section that default value is 4096
which is too high and congesting the network.

try lower this to 1000 might help the network stays up.
but the worms still slowing down the internet.

btw. also for p2p problems, this trick might work.
because, the way p2p connect is pretty much like how worms spreads...
also, try sets lower maximum connection in your p2p so not to congest the network.

rexster
05-06-2005, 15:38
can we apply tarpit to slow down these worms?

like this: http://www.securityfocus.com/infocus/1723