So this switch is accessible from the internet?
It has a valid IP or port mapping to the unit?
Strange behavior MINI
-
sirhc - Employee
- Posts: 7398
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1604 times
- Been thanked: 1322 times
Re: Strange behavior MINI
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Re: Strange behavior MINI
The switch is accessible from the internet with a static public IP.
Access control enabled, and limited to our own IP addresses.
Has been working fine for 3 years like that.
Access control enabled, and limited to our own IP addresses.
Has been working fine for 3 years like that.
-
Stephen - Employee
- Posts: 1013
- Joined: Sun Dec 24, 2017 8:56 pm
- Has thanked: 81 times
- Been thanked: 178 times
Re: Strange behavior MINI
Hey jma,
We've run some tests on the switches and confirmed a DoS/DDoS attack vector which has been fixed in 1.5.1rc5.
Considering we don't know all the possible factor's with your network there's no way to be certain that a DoS attack is happening. But the fact that the switch is publicly accessible, there is a confirmed attack vector, and that there haven't been any other issue's for quite some time (with no change's in your network configuration as far as we know) rc5 might do the trick.
You can download it here:
viewtopic.php?f=17&t=240
Hopefully this fixes the issue.
We've run some tests on the switches and confirmed a DoS/DDoS attack vector which has been fixed in 1.5.1rc5.
Considering we don't know all the possible factor's with your network there's no way to be certain that a DoS attack is happening. But the fact that the switch is publicly accessible, there is a confirmed attack vector, and that there haven't been any other issue's for quite some time (with no change's in your network configuration as far as we know) rc5 might do the trick.
You can download it here:
viewtopic.php?f=17&t=240
Hopefully this fixes the issue.
Re: Strange behavior MINI
Hi Stephen, thank you.
I have upgraded the switch to 1.5.1rc5. I will keep you updated.
I have upgraded the switch to 1.5.1rc5. I will keep you updated.
Re: Strange behavior MINI
Stephen, strange thing in the access control panel with this firmware. It mentions:
The configured access controls do not include the IP address you are currently using (::ffff:46.**.***.**).
If you save now you will lose access to the device.
I logged out of the switch after upgrade and logged back in and the message is still there.
The configured access controls do not include the IP address you are currently using (::ffff:46.**.***.**).
If you save now you will lose access to the device.
I logged out of the switch after upgrade and logged back in and the message is still there.
-
sirhc - Employee
- Posts: 7398
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1604 times
- Been thanked: 1322 times
Re: Strange behavior MINI
Post up a screen grab of your Access Control list and what IP are you located at
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Re: Strange behavior MINI
Hi Sirhc, screen shot attached. At this moment we have not had the problem since we have upgraded.
I have sent you the IP addresses in a private message.
I have sent you the IP addresses in a private message.
- Attachments
-
-
sirhc - Employee
- Posts: 7398
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1604 times
- Been thanked: 1322 times
Re: Strange behavior MINI
Well the screen grab above is useless as I needed to see what your IP was and what your IP allowed range was.
Your picture looks more like what the FBI is providing Congress for oversight these days - HEAVILY REDACTED - LOL
I asked Stephen the programmer working on this to reach out to you.
Your picture looks more like what the FBI is providing Congress for oversight these days - HEAVILY REDACTED - LOL
I asked Stephen the programmer working on this to reach out to you.
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Re: Strange behavior MINI
@sirhc: I had sent the IP addresses in a private message!
-
sirhc - Employee
- Posts: 7398
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1604 times
- Been thanked: 1322 times
Re: Strange behavior MINI
I understand but I also need to see what your Access List of IP's is.
You said your error message was that you would lose control of the switch which is because the IP your at does not fall within the specified allowed IP's in your list....correct?
You said your error message was that you would lose control of the switch which is because the IP your at does not fall within the specified allowed IP's in your list....correct?
The configured access controls do not include the IP address you are currently using (::ffff:46.**.***.**).
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Who is online
Users browsing this forum: No registered users and 0 guests