 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, 0 a2 v1 q2 N& a/ }/ P! Z
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。7 X" z8 F5 L& O2 b
3 f# x6 C( c5 Z5 v' \: i- nDoes Telus block any ports? 0 F+ G! p; w I! f
! p1 f/ K' v9 qThe only packages with no blocked ports at this time are the Server packages.
3 u5 ?2 f) S8 T R- Q1 f! z
* Z4 s9 V/ [7 J. |# S3 LThe Blocked ports currently are:4 g& A4 l4 P8 t/ F' ~+ K" U$ T+ J
/ Z% p4 }* R6 {8 o9 b" A9 ?TCP 21 (ftp)' a! q7 Y m6 x$ _1 T/ i/ K( p
Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.; E: a4 o$ w ]7 ^: W ^
" @3 v( w* q3 w. t4 gTCP 25 (smtp)4 X+ c% V# v. y
Customers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
( @/ \9 U# w7 ?: Z$ j0 b
9 P7 R/ M* r) i/ h# q! g- P1 wTCP 80 (www)
9 i& w3 _. Q! P* N7 _0 ^% i i! {* ~Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.
& y( g1 N5 `/ i8 ~2 R5 l4 b
. d+ C8 _; A3 A7 n$ v5 ITCP 110 (pop3)* S% ]' g5 e3 n; G4 |- i
Customers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.4 J* h2 S: c- D* z
" h* g% T: G7 \$ H" wTCP 6667 (ircd)" q" h3 q& S3 x9 G. X; @; x% w
Customers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.1 _( u# a( {, o E3 i
5 L7 ]8 k- n# ]* p6 y) hTCP/UDP 135-139 (dcom and netbios)
) D, z7 q# f( d; K2 [These ports are commonly exploited by worm viruses:1 q6 C( a& a$ X/ c/ \' ]
135 Windows RPC
2 X$ D( \) s4 w) T, c136 PROFILE Naming System (basically unused)
0 s% i4 T2 x6 D* T U137-139 Windows NetBios. K& Y2 l5 \" R3 [9 [8 o
3 u" f. v8 ?* [* R" ^, ITCP/UDP 445 (ms-ds). M/ n. D8 V6 {3 E0 G% \
Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.
. s; A# w# l( Z! ~( S' e9 Z
- a* O0 ~: u. P5 b5 W, v }TCP/UDP 1433-1434 (ms-sql)/ Z6 C8 W8 o+ L* \2 N
Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|