Cox Pass-through of DoS attacks?
Connecting to a web page often requires two or three attempts. HTML email often doesn't render without going back and forth between them several times. When this is occurring I found the following ...
Forum Discussion
RST Scan
It looks okay and not malicious or an attack.
RST Scan is a type of port scan and port scans are as old as the Internet. Port scans aren't malicious per se but instead could be reconnaissance before an actual DoS. Port scans are like walking down the street and looking into car windows. It looks suspicious but you're not doing anything wrong other than looking suspicious.
RST means the ports are closed and your router is doing its job…especially after 2-3 attempts. However, if it's happening on 1 website, the website is probably trying to sync with these ports at 1 time and some routers will get confused and log as a DoS attack. It's not an attack because the port was reset.
As long as you're seeing these "RST Scan" entries, you're good to go.
