 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较,
' R7 v6 F+ [' F0 R0 e9 ^0 X家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。
) O! k+ e! P& o+ N
3 Y" Q5 o. p; K* C7 I. e8 SDoes Telus block any ports? . Q- T$ Y: K0 T6 f( T0 f
$ ~/ w5 F3 k2 B. R& m4 vThe only packages with no blocked ports at this time are the Server packages.
& F5 L& Y3 Z7 ~0 x1 H4 M5 O8 c" F/ x6 f4 t- L* N1 S
The Blocked ports currently are:
8 z, z5 U6 u3 {9 G* O8 b: f, p, w' M0 A, L& v6 P' ~
TCP 21 (ftp)
+ o7 [9 f& b# {Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.3 j& { a, K0 R4 J* o3 B5 E
6 r. p' o7 y& j$ L8 s) S/ ~
TCP 25 (smtp)
3 X" Y, j# s9 V' I* y$ rCustomers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
2 e6 M- Y4 a! ]- m$ A0 n( y6 {" x; I
TCP 80 (www)
) Z$ O W/ y3 _9 ]Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.
; F. l( A4 n/ F* R/ o# l2 R* Y4 r8 `" T5 h; `3 [- O+ a
TCP 110 (pop3)
. K8 m$ f, ]! dCustomers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.0 L( R/ |3 S% i
! |: k# B {' }9 TTCP 6667 (ircd)
# Q' v5 Y* {' v, G, R7 T! UCustomers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.
) l3 T% S% W5 {2 |/ b' D. f
U$ b- w" t' w# F6 ~5 D, BTCP/UDP 135-139 (dcom and netbios)
% P: u1 @" W( H/ l% iThese ports are commonly exploited by worm viruses:5 o8 \8 L: \* C6 b
135 Windows RPC
7 ^- q0 @5 K' T136 PROFILE Naming System (basically unused)% y0 V( l3 N& K+ r9 M4 x1 c( c
137-139 Windows NetBios9 Y3 o' J w9 s1 U* Q
! `, @' R5 o: d$ tTCP/UDP 445 (ms-ds)
4 }5 V! l6 k* GMicrosoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.
[4 g8 Z) _ |& a; ]# h, Y& l+ {) L1 q2 f* Q5 u
TCP/UDP 1433-1434 (ms-sql)
$ X" z Y2 c# @# }/ C$ C+ uMicrosoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|