faniebraai
RIP
@TelkomZA
PM send
you have slow speeds today? So do I, I know we stay in the same area
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
@TelkomZA
PM send
My Hello Peter Post :
For three days (now 4) , and after several hours on the phone to the call centre, and speaking to many many different people, I have not succeeded in explaining my problem let alone getting advice or action to fix it.
Any IP address that is assigned by TELKOM (my ISP) to either of my two routers on ADSL lines, are IMMEDIATELY attacked with Denial of Service Attacks from all over the world.
The attacks are causing my routers to hang and require reboot every hour. (and as an aside, Telkom Call Centre suggests that is a lovely solution, no problem, just restart the routers when they hang.)
Can I please speak to someone who knows what this means :
kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=212.38.181.116 DST=105.226.10.250 LEN=40 TOS=0x10 PREC=0x00 TTL=246 ID=23235 PROTO=TCP SPT=51655 DPT=5905 WINDOW=1024 RES=0x00 SYN URGP=0
There are hundreds of these .... all from different SRC IP addresses. Even if my IP address changes due to reboot of router, Attacks just continue on new IP Address.
PLEASE HELP ! Who can I talk to to convince Telkom that THEY are under attack, and that the problem is not my Laptop ? (Not that I don't have seventy other computers on the network) And that for me to try connecting with another computer is not the answer.
Obviously I am trying to determine if any of this is originating from within the network, but I can not find anything.
I am packet capturing as we speak.
More Logs : (D-Link)
Dec 22 10:01:00 user alert kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=122.225.109.103 DST=(my dynamically assigned IP)
LEN=40 TOS=0x10 PREC=0x00 TTL=96 ID=256 PROTO=TCP SPT=6000 DPT=22 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 22 10:01:20 user alert kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=60.173.10.74 DST=(my dynamically assigned IP)
LEN=40 TOS=0x10 PREC=0x00 TTL=107 ID=256 PROTO=TCP SPT=23243 DPT=10022 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 22 10:06:26 user alert kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=41.220.77.56 DST=(my dynamically assigned IP)
LEN=52 TOS=0x10 PREC=0x00 TTL=115 ID=9526 PROTO=TCP SPT=60689 DPT=40381 WINDOW=8192 RES=0x00 SYN URGP=0
Other Router : (Netgear)
[DoS Attack: ACK Scan] from source: 179.60.192.97, port 443, Monday, December 22,2014 10:24:22
[DoS Attack: ACK Scan] from source: 77.234.41.63, port 80, Monday, December 22,2014 10:23:43
[DoS Attack: ACK Scan] from source: 179.60.192.17, port 443, Monday, December 22,2014 10:16:36
Any comments on this please ?
I will be loading a different ISP on the routers soon, to see if the attacks stop.
Problem remains , no one at TELKOM even understands my question.
Try bitco wireless they add VoIP for about 69pm and you cab port your telecom number over to them bit more expensive but IMO worth it. I am looking at switching over to themHow long is the average wait for a line to be moved to a new address in the Johannesburg area?
I put in the order the 2nd of December and the date of the moving was the 19th of Dec, still no word. Is it normal to have to wait this long?
Edit: Got a hold of someone that said "They don't have any cables" and "Telkom is running is project in my area". Whatever that means, all I know is I'm gonna be without internet for several months...
All while Telkom is all too happy to charge me anyway.
Your fault was cleared 12-dec-2014 09:28:00
Have Telkom re-open the fault for you
Try bitco wireless they add VoIP for about 69pm and you cab port your telecom number over to them bit more expensive but IMO worth it. I am looking at switching over to them