 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, `' i1 a# X& M- e4 F
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。 H8 }, g! r2 l& d. Y, O
, v! H+ L$ P6 C6 a8 i8 j$ X% |( RDoes Telus block any ports? 4 i% r; j6 U. m: C2 W: C% y
- A4 j* }# n) b; ~( e9 r- D t+ \3 J
The only packages with no blocked ports at this time are the Server packages. - T4 a$ @: c5 N* y
" | Y7 v. w5 G' |, H
The Blocked ports currently are:
; h! h# ~3 q% [ n- d* C* ^, C$ e' y: e9 e: M7 k5 u
TCP 21 (ftp)2 l% Q( V4 A' e8 H$ \4 [/ }
Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.
: w6 ]0 f$ l" g# G3 Q% r) [ S: R% L2 c, u9 {- }1 [5 I- O
TCP 25 (smtp), I6 F( i8 S2 D; {- u
Customers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam." p' Q9 i: |1 F
) `& X9 E! V* zTCP 80 (www)' F, o1 S7 D0 @7 x
Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.
: k) u, `, f: ^
- H' l7 I$ r3 k! LTCP 110 (pop3)& x- `) v! b% z2 C
Customers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
) l' f8 u! {8 Y9 a7 y* M
" |: H0 \7 W j1 N+ W$ t& ITCP 6667 (ircd)
( m5 | q' q9 }Customers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.. E9 P6 R( W5 E* \9 E2 |/ z' ?
- ~6 a1 R4 _" g+ s u6 }' CTCP/UDP 135-139 (dcom and netbios)
( u( R& \/ P+ H. fThese ports are commonly exploited by worm viruses:8 n0 G6 x' n( l4 _
135 Windows RPC
& \0 s/ q" \9 G7 S k136 PROFILE Naming System (basically unused)& |$ ?' E* ?& u, ~1 {) G
137-139 Windows NetBios
( a/ w0 u+ n( b5 }2 C# @/ s" c+ A6 J3 r# x
TCP/UDP 445 (ms-ds)
& t3 z, l+ B. e1 Z, SMicrosoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.0 I1 y. D7 N: S: o/ O) f* T% V; G* e
! h* z# y* `) w* M1 q' C4 _
TCP/UDP 1433-1434 (ms-sql)5 f% g) |, O& N } b2 b
Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|