Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 4 subscribers
  • Views 9067 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Intrusion Prevention

Alden Padron

Hi,

I'm pretty new on the forum so please bear with me.

I`m having a little issue with UDP Flood Protection. Everytime I try to watch a youtube video on high definition or 4k using "Google Chrome" browser, the intrusion Prevention activate generating this kind of log and cause the video render completly unplayable.

 

 

""
2018:05:25-13:17:04 djfranco ulogd[4708]: id="2105" severity="info" sys="SecureNet" sub="ips" name="UDP flood detected" action="UDP flood" fwrule="60013" initf="eth0" srcmac="2c:0b:e9:15:f0:22" dstmac="Removed my wan MAC" srcip="173.194.186.233" dstip="removed my wan IP" proto="17" length="1378" tos="0x00" prec="0x20" ttl="59" srcport="443" dstport="64165"
 
""
Only way to watch the video in Chrome is disabling the "Use UDP Flood Protection" or adding an exception.
But the interesting part is that using Mozilla FireFox this doesn`t happen.
 
So why Chrome activate this and Firefox not ?
 
thanks in advanced.
 


This thread was automatically locked due to age.
Parents
  • 0

    Hi, can you post a link to a youtube video that is being blocked? 

     

    Also in your intrusion detection options, have you changed the source and destination packets/second or are they at 200 and 300 respectively?

     

    Also is web filtering turned on and is the web filtering blocking anything when you try to watch a youtube video?

  • 0 in reply to Alden Padron

    Thankyou. I can confirm that there is indeed a UDP flood attempt when playing this video on Chrome, but it plays fine on Firefox. My webfilter log shows nothing being blocked. But my intrusion prevent log shows this:

     

    2018:05:25-13:57:15 mysophosutm ulogd[19751]: id="2105" severity="info" sys="SecureNet" sub="ips" name="UDP flood detected" action="UDP flood" fwrule="60013" initf="eth0" srcmac="00:01:5c:8a:3c:46" dstmac="68:05:ca:58:20:28" srcip="172.217.129.41" dstip="XX.XX.XX.XX" proto="17" length="1378" tos="0x00" prec="0x00" ttl="58" srcport="443" dstport="56959"

     

    Occasionally Chrome has issues playing HD Youtube videos and clearing the cache helps, but in this case the UDP flood detection is blocking the video from loading but it plays fine on Firefox.

Reply
  • 0 in reply to Alden Padron

    Thankyou. I can confirm that there is indeed a UDP flood attempt when playing this video on Chrome, but it plays fine on Firefox. My webfilter log shows nothing being blocked. But my intrusion prevent log shows this:

     

    2018:05:25-13:57:15 mysophosutm ulogd[19751]: id="2105" severity="info" sys="SecureNet" sub="ips" name="UDP flood detected" action="UDP flood" fwrule="60013" initf="eth0" srcmac="00:01:5c:8a:3c:46" dstmac="68:05:ca:58:20:28" srcip="172.217.129.41" dstip="XX.XX.XX.XX" proto="17" length="1378" tos="0x00" prec="0x00" ttl="58" srcport="443" dstport="56959"

     

    Occasionally Chrome has issues playing HD Youtube videos and clearing the cache helps, but in this case the UDP flood detection is blocking the video from loading but it plays fine on Firefox.

Children
No Data
Unfiltered HTML