Hi, planning to bring in RB751G-2HnD? If so, when?

Also do you carry RB250GS?

Thanks.

I'm afraid Sillymexican is correct. There are only very basic firewall filters in a default ROS config and one very important one that doesn't do anything.

Anyway here's a real-life example. Just last week, I bought an RB951Ui-2HnD from Viewnet, Low Yat Plaza. Unifi was setup on that and within 24hrs, someone is using it in a DNS amplification attack.

That was my bad and easily fixed. For the average user, they won't even know that their router has been compromised. The RB951 is fast enough to handle normal browsing needs and serve up the DDOS simultaneously.

All this could have been prevented by that one important default filter that I mentioned above but in ROS default config, it's set to drop packets to the input chain from ether1.

So that's one way that Asus, TP-Link, DLink, etc... are better than Mikrotik but of course, I always recommend Mikrotik. I love the router and I could always use a few more zombies when I need to DNS amp someone.

PS: I wrote about DNS Amp Attacks last month https://forum.lowyat.net/topic/3860279


See above.

This post has been edited by soonwai: Mar 23 2016, 04:06 AM

Do you sell spare PSU for RB951Ui? I would prefer 24V but 12V also can.