 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, / D& f8 C. H1 F0 o( R
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。4 x4 Y, J$ p9 e) }' u
# S+ Y' a, Q3 K5 zDoes Telus block any ports? 2 p4 J0 [# G; s+ O) O% _# r$ T, S
6 N0 v* b+ Q" ^6 r9 }5 uThe only packages with no blocked ports at this time are the Server packages. ) i! V* n+ r0 Z U4 Q& W, _; z
+ f& R3 @3 w3 ?The Blocked ports currently are:
4 |; o# v7 P* N5 r4 ~4 r8 y/ Z$ I; j+ ~% R% B F
TCP 21 (ftp)
" C( q$ R4 Z( x) h$ a9 aCustomers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files." \& k0 ~) f" l
3 s8 @* K( H& @: k3 }8 D' n1 @
TCP 25 (smtp)! X1 }2 r0 f) A" v; |) ~/ S
Customers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.0 G$ G, |1 \/ ]9 _6 r7 n* x
5 k N; k$ s: qTCP 80 (www)
. V) t9 Y3 m# J7 MCustomers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.% l X1 N) B! D, `- f' k, t
% L5 H4 V' k8 e% u1 a+ OTCP 110 (pop3)
; R! k* u0 c( ZCustomers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
# d4 c# q9 p- F& ? a
- E' k& H9 s' ^9 FTCP 6667 (ircd)
) Z0 T% O9 f& E2 QCustomers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.
4 R9 f$ p) A$ u% \$ R
- \& G1 r! z6 C# ~& o) H) dTCP/UDP 135-139 (dcom and netbios); l) P6 y) o. S) f1 ~" U
These ports are commonly exploited by worm viruses:
5 Z& S# n! B- \& m2 ^' h" \; W135 Windows RPC
% S* ~ ~- v8 i& | Z: K/ q! d% K7 Y4 P136 PROFILE Naming System (basically unused)5 t/ W$ T. v% I- W
137-139 Windows NetBios/ S7 k- B5 v6 O$ E* y
- g2 c7 m0 g6 b" I) S
TCP/UDP 445 (ms-ds)# D# d7 S* a+ I7 _* H
Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.5 y, e( h. s/ n8 T
* F+ J! n; v! X, DTCP/UDP 1433-1434 (ms-sql)
& X* E( T+ @: s$ D; m% l" cMicrosoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|