 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, - f) S2 X8 q5 F- Y3 C3 ]; |4 S
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。
% j+ F* A+ R% J9 f# U# V4 t/ r4 t
/ @0 e4 U2 w# c( j: yDoes Telus block any ports?
7 n3 Z5 b' q( x. z& K; W! |) P/ w5 m" u# e* J* b$ [
The only packages with no blocked ports at this time are the Server packages. : a8 s; ^% z3 ~. p, d
+ t& R' X4 D( E5 x a
The Blocked ports currently are:
$ H9 g5 g; O) e4 q& t1 ]
& K5 W" H7 k0 OTCP 21 (ftp)
4 }, E0 r! V" R: `Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.
0 A. ]2 o4 z" w0 E, H; P
f6 E! i! T* b% XTCP 25 (smtp)
& V/ b7 h) w6 Z, wCustomers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.7 d8 J- x/ f. Z: l, A
) {, y: I$ R. M9 Q* k
TCP 80 (www)
! |/ P* j6 v0 w/ \5 k- cCustomers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched." {$ v( T1 t0 K
) s0 L9 c" U! z) t; F0 F0 `
TCP 110 (pop3)
( c. f) D7 W8 a# OCustomers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
- m& I$ g" b, ~! U" J) [4 A& @7 K# j9 {
TCP 6667 (ircd)
: \4 q1 v7 u* L: c. jCustomers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.9 o) n" x) l9 d3 J! i, \
4 E; t. {* X) i+ R; x x4 _7 l
TCP/UDP 135-139 (dcom and netbios)
3 P# d% r9 F4 X8 x: NThese ports are commonly exploited by worm viruses:
4 C1 k: o9 @9 Q9 T2 K135 Windows RPC
1 T& b! ?% O: s4 J. r: I, Y136 PROFILE Naming System (basically unused): \- @4 Q a9 z* ~- P
137-139 Windows NetBios- j% ?+ I2 g% i! H8 {+ c) R5 n0 J
4 x- J# u8 g0 S$ K/ O$ yTCP/UDP 445 (ms-ds)5 N$ [. \- i, A0 t: S1 U
Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.+ Q% Z2 W" B, O
. `+ e+ U4 F) J" h6 U) s% }% WTCP/UDP 1433-1434 (ms-sql) y- d2 l; U1 Q7 f$ r) H/ x" m
Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|