 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, ( N. v, ?, F) k8 o) u+ F; k
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。5 b0 h5 Q$ V2 z: b+ K; ?1 z! |9 S
- B9 l. r* S- C# y* x& Z# G/ qDoes Telus block any ports?
. j4 J* C$ C5 P0 \: R" h9 Z8 T
The only packages with no blocked ports at this time are the Server packages. * v+ M7 P0 S& r) u8 G2 E
8 x2 E/ ^" X, S6 C" _1 H6 VThe Blocked ports currently are:. V( k! R6 U6 A1 s
9 g! l& |% d; n" j2 A* a* r1 @
TCP 21 (ftp)1 b1 S& h9 K) z) o
Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.! ^2 l' C1 k$ ~0 Z+ Q0 r, `' K6 Y
! g8 p# w) c/ z+ l8 G5 v! ~TCP 25 (smtp)
' P5 t. t1 P% g* r4 ]9 |Customers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
+ ?# M @4 m( p( H0 ]) ]6 v" J5 V0 B% k
TCP 80 (www)' \$ m' l# g( s
Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.
. h& }* M6 S+ p: I! a% p2 x* x6 M% T! I
TCP 110 (pop3)
* r" S8 z" P& GCustomers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.) `# f2 O0 t$ c# a6 W! E
, [: U0 R% s) M) q( mTCP 6667 (ircd), \/ j- E( n1 A& l7 t
Customers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server.
$ B" I# h* B5 R# ]9 J
, P3 I0 G+ ?7 T, OTCP/UDP 135-139 (dcom and netbios), y3 n1 Y7 p3 I' j2 S: P# X
These ports are commonly exploited by worm viruses:: v! n5 C+ R) F: }: G6 y8 S
135 Windows RPC& N: r: F& _* m
136 PROFILE Naming System (basically unused)' a0 _, F! ^$ w0 C5 i$ {
137-139 Windows NetBios
! O) [+ I9 h( b! ~) ]) L _- O; K0 }# p% k' x
TCP/UDP 445 (ms-ds)/ k1 ^9 k+ n( F# r: k1 \
Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.
$ f: x4 v" O ]% i* D% J: v0 z7 w5 q* T+ g4 ~+ G5 I7 a
TCP/UDP 1433-1434 (ms-sql), ?$ _4 O% V- }
Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|