How Do You Handle Portscanning Attacks?

Kainaw asks: "I tried to submit this earlier, but I couldn't because I had no bandwidth available. The reason is simple: I use Comcast for cable Internet. My modem/router is portscanned constantly. Nothing makes it past the router, so everyone tells me that it isn't an issue. Well, it is when I can't access any webpages, get email, or even submit a simple article to Ask Slashdot because my entire bandwidth is eaten up by script kiddies with a new portscanner toy. This is a two-part question: First, can anything be done with a simple at-home modem/Linksys router/two computer setup to stop a portscanning attack? Second, is it possible for the Linksys router to become a 'bot' and actually be the originator of much of the traffic?"

Comments

Linksys ADMIN password

[SpaceLifeForm]

You did change it, right?

And you don't allow access to it from un-trusted machines (i.e., the Internet), right?

Otherwise, in theory, it could get pwned. It is running Linux and tools such as busybox.

If it hasn't already been said...

[moorley]

Turn off WIFI and check your bandwidth...

Chances are someone's pulling your bandwidth via WIFI or its creating some problem.

I haven't quite nailed it down yet but in the last few months both my personal network and a friend of mine's have been bogged down whenever the WiFi is turned on. I like to think I'm security savvy but I just started digging into it yesterday.

I'll reconfigure the netgear so it only accepts the MAC addresses I have but it's still quite annoying. I didn't broadcast the SSID and I used WEP/WPA but my surfing lags horribly whenever WiFi is turned on. Even in rural Idaho there be issues.

who'd thunk it?

Good luck!