 鲜花( 87)  鸡蛋( 1)
|
之前发过一个帖子有关Telus, Shaw 的比较, 3 U5 t/ s: \6 F8 B3 ^+ b% j8 |1 _
家用Telus 已经封锁了不少端口。 也随时不通知下说锁就锁, 非常讨厌。; c% E$ F' L9 T
7 V1 y5 Y& M' K, W. TDoes Telus block any ports? - b4 Y$ d) y1 t( J1 S- v
; T5 Q! N; h* I+ u. J4 T7 Y% n
The only packages with no blocked ports at this time are the Server packages. 7 u9 `2 _; t! W V+ l9 _( }* n
A+ Z1 K( F, k9 [- H1 i
The Blocked ports currently are:
7 j, ?9 h: j: G- @5 T2 `0 r6 ~/ _7 k7 K/ ]/ M) E% _
TCP 21 (ftp)2 h+ ]+ `3 [3 o! h5 k: }
Customers running an FTP server will no longer be able to have Internet users connect to their server. Many customers computers are used as FTP servers to store illegal files.
0 C% n6 z" M5 y: X3 q7 F$ ^) o% ?; E* ]4 `0 y
TCP 25 (smtp)
( b# W. I: c- |$ JCustomers running a SMTP mail server will no longer be able to receive email requests. Also, Telus users will not be able to connect to non-Telus smtp servers on port 25. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam.
q$ A0 P4 k* Z3 G
5 G& v6 q3 W- G4 KTCP 80 (www)
& t& J; p% j4 Z& J6 u# M1 }Customers running a Web server will no longer be able to have Internet users connect to their server. Common exploit on old Window IIS server and Linux boxes that are not properly patched.
- j+ U- M* v0 d' O ~3 L* b6 b" R, u* X9 T2 a" l! b) U# j
TCP 110 (pop3)
: Q# e) J- Z1 H. z0 QCustomers running a POP mail server will no longer be able to have Internet users connect to the server. Prevent mail servers that operate as an open relay. Open relays are used without a customer?s knowledge to sends millions of pieces of Spam./ s, |! [. g% e% ~! H
2 C0 ^6 ?: b$ \+ oTCP 6667 (ircd)
" @: V1 I' _5 f. c3 eCustomers running a IRC server (Internet Relay Chat) will no longer be able to have Internet users connect to the server./ | ~- z3 a8 x, z( Q9 q
3 N+ Q; ]3 J0 f7 |! dTCP/UDP 135-139 (dcom and netbios)
/ g% {; T5 n% {- w% K. d) c$ [These ports are commonly exploited by worm viruses:
# j% t* {. \4 l" h# i6 e135 Windows RPC/ [9 i2 d* R$ z+ j0 D" [5 ?0 n
136 PROFILE Naming System (basically unused)% f9 }2 g% r N" G1 G
137-139 Windows NetBios
5 R9 C$ r+ w" N" i5 {* ?/ i2 N
: q$ H$ [/ v3 F1 d$ _ {4 d2 r. mTCP/UDP 445 (ms-ds)
; z- W# S5 @$ c0 ^7 [8 I+ O4 o! |Microsoft Directory Services - Customers that allow legitimate Internet users access to their computers will loose this ability. This allows hackers to directly connect to a Windows based computer and gain total control over the OS.
5 x3 x4 I C2 z1 y" `8 `9 z6 X& r! } S, V- Q
TCP/UDP 1433-1434 (ms-sql)
$ U$ ^1 w4 M: c3 {3 H; b" K6 ?Microsoft SQL server - Customer running an SQL server will no long be able to have Internet user connect to their server. There are several worm viruses that exploit holes in SQL server. |
|