Possible syn flooding on logs

[vikingsam]

Greetings. Please forgive a question from a networking rookie. Yesterday my system logs showed 50 or so lines of
kernel: Possible SYN flooding on port 18099 Sending cookies

Our Xbox one has been asking for DHCP assignment very frequently lately, and these syn flooding entries were bookended by Xbox connection requests.

My question: is this just DDOS protection doing its thing? Could it be triggered by the repeated DHCP requests from the Xbox? Or is this something to be concerned about and to react to?

Thanks in advance for advice

 

[skeal]

Greetings. Please forgive a question from a networking rookie. Yesterday my system logs showed 50 or so lines of
kernel: Possible SYN flooding on port X (I think it was 18066...I can find it later if relevant) Sending cookies

Our Xbox one has been asking for DHCP assignment very frequently lately, and these syn flooding entries were bookended by Xbox connection requests.

My question: is this just DDOS protection doing its thing? Could it be triggered by the repeated DHCP requests from the Xbox? Or is this something to be concerned about and to react to?

Thanks in advance for advice

If you are using ddos protection under firewall try disabling it. Gaming and ddos is hard to work out.

 

[vikingsam]

If you are using ddos protection under firewall try disabling it. Gaming and ddos is hard to work out.

I appreciate the suggestion, but you are talking to a guy for whom a router's #1 job is security. Everything else is secondary

 

[skeal]

I appreciate the suggestion, but you are talking to a guy for whom a router's #1 job is security. Everything else is secondary

Unless you are running a server sensitive to ddos you do not need this setting. Lets say you run a server with little network protection for a game on the internet...you still have zero to worry about. I understand your concern but this is over kill in your situation.
EDIT: To be sure your errors are caused by this setting being enabled....just saying.

 

[vikingsam]

Unless you are running a server sensitive to ddos you do not need this setting. Lets say you run a server with little network protection for a game on the internet...you still have zero to worry about. I understand your concern but this is over kill in your situation.
EDIT: To be sure your errors are caused by this setting being enabled....just saying.

Good to know, thank you. That makes sense. Is there any other reason I might see these lines in the log? I don't run a server at all, so I don't reckon I would be the target of a DDOS attack...right?

 

[skeal]

Good to know, thank you. That makes sense. Is there any other reason I might see these lines in the log? I don't run a server at all, so I don't reckon I would be the target of a DDOS attack...right?

In my exposure I would say online gaming. xbox live, etc.