Hi, we have read around as much as possible so please excuse the potential ignorance but our 2820 WAN connection has been under continuous traceroute for over a week, predominately from one address. We have never seen this before (beyond 12 hours) and can only find annecdotal info. on what to do and what it means. Some clarity would be very helpful.
Both ISP and supposed originating network had nothing constructive to say. IP is not known to us or services we use.
1. Is the DOS block Traceroute option effective (some have suggested not worth using, so why provide it?)
2. Our understanding is that this is a potential issue given enough time.
3. Clear instruction on appropraite rules and solutions would be much appreciated.
Apologies if we missed a relevant post.