Does the Apple AirPort Extreme provide protection against DoS attacks?

DoS (denial of service attacks) Does it defend against that? Example Netgear routers have Dos protection. i'm in a dilemma here and this is the biggest factor before i will invest in a new router. Also please let me know if the AirPort Express has this feature (or not) as well. Thanks

Posted on Sep 20, 2016 8:06 PM

Reply
3 replies

Sep 21, 2016 12:55 AM in response to laflame!

There is no proper firewall in the Airport Extreme or any airport router. What is often referred to as firewall is simply NAT function which is available in any internet router.


The Netgear and any of the better routers do have SPI firewall. You do realise that turning on the firewall.. most people never do it.. because it causes major issues for most people.

So are you in an area or have previously had DoS attacks.. then this could be important.. for most people on non-compromised systems.. DoS attacks are not actually that common.. and a pain to block when they do.


What I would comment on is the effectiveness of protection from DoS attack in a standard domestic router.


http://www.dslreports.com/forum/r1895824-DOS-protection-on-routers


A DoS attack does not need to break through the firewall in the router at all.. it just has to overload the interface with requests. The effectiveness of DoS is sheer load on your connection.. and the only way to get around the problem is via your ISP blocking the attack somewhere further up the chain.. and to change IP address and DNS settings.

Sep 21, 2016 3:50 AM in response to LaPastenague

I know what a DoS attack is buddy, i get them every week by little toxic kids. i don't need to know any more on that. i'm asking if this router or the new Netgear routers will block it better (it specifically states protection against dos attacks on the box). it doesn't matter what area i'm in, it's the community i'm in which is the most toxic community you'll ever find on a game. I've asked my ISP they sounded like a person getting overwhelmed by the question who doesn't understand what a Dos is (but they do) and told me instead they'd pull me off the service if the Dos attacks affect their servers or something. Called again, someone said they do offer Dos protection services, but they cost extra if i remember correctly. i'll tell you what, my current TP-link router gets destroyed. it can't block the attacks at all. Sounds to me like you don't know the complete answer and are unsure yourself of the effectiveness of Dos protection on the netgear routers, but I will check that link out and wait for more answers.


Edit: it turns out, my router has always had DoS, SPI Firewall functions in it......lol. the firewall was always enabled but just found out that dos protection checkbox was disabled by default. i will try out enabling the dos protection feature and see how it goes. have to do some research though cuz there are numbers involved.

Sep 21, 2016 3:32 PM in response to laflame!

I used to have terrible DoS attacks.. so I do know what it is like.


The issue was on Cable. The company took a mind over matter approach.. we don't mind and you don't matter.


I moved to ADSL and it basically stopped. The problem with cable is the shared nature of the run.. and every infected computer on your run hammering every other computer. It happens also in building ethernet connections even worse.


To overcome it I ran a linux server/router with ACID and SNORT.


Domestic routers do not have the processor power to handle heavy attacks. (Unless you are in the >$200 range). But they also lack the firmware quality.


If you keep having issues once you turn on the protection (TP-Link btw are not great at this). Move to a linux or BSD based router .. eg PFsense. Or spend the money for an enterprise class firewall router.


The Apple router is not good enough and has no SPI firewall at all.

The Netgear router is domestic grade although the models >R7000 have loads of processor power the firmware is clunky. It is hardly ever updated. I would move to a third party.. shibby tomato for example.

But if you really have a terrible situation.. nothing beats an old PC with linux and real firewall.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Does the Apple AirPort Extreme provide protection against DoS attacks?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.