 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较,
5 y) r5 [" A c* e. H( A- B家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。
) @, R5 v3 S2 g& @
0 d+ |4 F: |) T0 u" P! N3 KDoes Telus block any ports?
+ _! E) S! v8 T
3 D8 X; R7 y- f! u) ZThe only packages with no blocked ports at this time are the Server packages. 7 Z+ b6 d7 X. X1 f; R1 l+ A* _% `
8 g8 t3 y& K- E6 g$ P
The Blocked ports currently are:
$ R+ E7 ?, ~5 p- j
/ A: t; t2 B1 Z0 {TCP 21 (ftp), c' ~" W& P; }
Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.; h! o3 g4 P6 y1 s
* O. Q9 H# H6 v! HTCP 25 (smtp)
0 D9 p2 v/ r- {+ \# o( NCustomers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam." d$ x) N7 R9 s% K
" C2 ?1 K* ~; s; L% w1 O+ b# VTCP 80 (www)$ P) S/ K- ]; e% A; e
Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.
* R8 o" S D1 L7 Z4 M8 ~% @1 m& [) h
TCP 110 (pop3)) a# w5 S! F) H1 Q
Customers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
; B w2 p4 k0 z6 r0 x" G) \% k* E
! z J% T7 ~1 k+ d- l% [" m1 iTCP 6667 (ircd)2 {$ Y/ a; h$ V* `; G& \; I% W
Customers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.
5 j- e1 l) y1 ?$ U- K
' X9 H3 r3 [$ P5 N3 }TCP/UDP 135-139 (dcom and netbios)# D( b& G# q5 s0 Q$ Y& `# E7 o
These ports are commonly exploited by worm viruses:& r$ |( | B$ z% C
135 Windows RPC
; J/ Z0 i& \* f' H* n& v136 PROFILE Naming System (basically unused)
3 z# w7 L' g! d1 O4 x137-139 Windows NetBios
6 o; F' ~& }3 @* h! v3 v, y" o2 D" z8 y- N4 T2 K, v. s' L2 Y! R
TCP/UDP 445 (ms-ds)( q! l* b U1 L/ _$ }
Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.( W' Q0 y. Z/ ?" a! Y2 X* U
+ R- w- F3 r4 H h' m: I% g
TCP/UDP 1433-1434 (ms-sql)* k( J \0 @: K: ~1 D; ~
Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|