How many is "some"? They may be boxes that have been compromised with a worm, 
trojan, virus or spyware. Look closely at the destination ports they are 
connecting to. If the addresses/ports are in sequence, they may have malware on 
their PC.

John

>-----Original Message-----
>From: Ron Wallace [mailto:[EMAIL PROTECTED]
>Sent: Monday, July 31, 2006 04:24 AM
>To: [EMAIL PROTECTED], wireless@wispa.org
>Subject: [WISPA] I need Mikrotik Help
>
>To all,
>
>I have some abusive users, when I look at IP Firewall Connections I find a 
>some users with over a hundred (100) instances listed in the source address 
>column. I think its flooding my network. I have 2 T1's and 81 users. We're 
>growing faster than I can install new customers.
>
>I am using Canopy 900, Canopy 2.45, & Tranzeo 2.45. I have activated the SM, 
>SNMP, BOOTP Server and Client filters on the canopy devices.
>
>How can I limit the number of active instances of these abusive users on the 
>Mikrotik?
>
>Ron Wallace
>Hahnron, Inc.
>220 S. Jackson Dt.
>Addison, MI 49220
>
>Phone: (517)547-8410
>Mobile: (517)605-4542
>e-mail: [EMAIL PROTECTED]
>[EMAIL PROTECTED]
>
>


--
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/

Reply via email to