Inordinate Increase in Traffic, Can't figure out what it is.
-
You probably need to find a local IT consultant, preferably one with both Microsoft and security backgrounds, to have a look at your systems. You've got something running on both those systems that's performing this activity, but whether it is malware (and the fact that your AV hasn't picked it up doesn't mean it isn't there) or something else isn't clear.
-
Thanks, I am in the process. Seems that my pfSense config allows DNS access from external. I'll have to look up how to change that.
~ tommy
-
Check your WAN rules and ensure that you don't allow port 53 (TCP and UDP) to any IP address but only to any device you're providing DNS services to external IP addresses from.
-
Sorry for the late followup on this. Finally resolved the issue. The DNS was open to public, closed that and after a week it all went back to normal.
Thanks everyone for the input and help. Learning as I go.
~ Tom
