 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, 9 b2 g a3 Y2 ~6 ]/ j' c8 r2 w. j
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。3 l7 u S4 F% R3 \6 b
$ O; a6 S( K; @& IDoes Telus block any ports?
0 F2 u, P3 `. X* s
/ x$ n* k9 H2 Z5 _1 ZThe only packages with no blocked ports at this time are the Server packages. 8 m% _9 [! y- |8 ^- G
# B/ w5 n' {4 }) s/ LThe Blocked ports currently are:
- [; @2 z( {+ p( D$ J& Y& U* l( L) j1 h7 l, J6 W
TCP 21 (ftp)! i8 N, h8 M1 @1 t' k
Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.
6 f' n0 q- j- G' M' i* {) u" R6 t$ |7 a2 y
TCP 25 (smtp)+ f: ~8 n7 O$ c7 w3 v
Customers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam., i4 C) R# y) L3 `
% |: j# F8 y, W7 v3 S4 q0 F6 mTCP 80 (www)+ \/ f3 o/ }9 h5 T3 h( B7 h
Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.2 X- Z/ c* R. x o
# M! \( j) I1 t* D2 x/ S% P
TCP 110 (pop3)
' C" X' s x/ w9 N% hCustomers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.1 x1 J( g; ?) P; }( a
! ^+ v" r7 n7 b" [( K% @TCP 6667 (ircd)- z6 T5 q6 m6 {. f3 ~
Customers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.
4 F4 a& b7 R/ S
$ V/ L' p8 [! f+ M& MTCP/UDP 135-139 (dcom and netbios)
% u9 c2 I1 }1 f, P# [: g: GThese ports are commonly exploited by worm viruses:0 N' I C; @" Z! {: @2 y
135 Windows RPC
" c4 R5 i5 Y T+ P, P136 PROFILE Naming System (basically unused)% W, z+ P$ z2 n0 L- ^$ N( m/ Z
137-139 Windows NetBios- N, J- m, R5 R# @& e4 w
( s2 D8 K( Z3 y7 |# @/ lTCP/UDP 445 (ms-ds)) x' v, m1 V: z5 R. g
Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.
) w7 j2 _0 s- K8 |2 W; @
0 p \; o( o% q1 \# j* s( ~TCP/UDP 1433-1434 (ms-sql)
$ T. z4 W2 w4 H8 F" |Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|