Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Virgin Media Internet Service (https://www.cableforum.uk/board/forumdisplay.php?f=12)
-   -   Merged - Port blocking (https://www.cableforum.uk/board/showthread.php?t=5068)

Lord Nikon 11-12-2003 23:31

Re: Port blocking
 
I still say you should be able to opt out of the port blocking.

it's one thing for NTL to set up a "virtual firewall" for some users to prevent virii but to then force all users into their server side firewall will only alienate some users.

I guess it is a fallback idea from Bill "too tech" Goodland or Aizad "our users don't want 2 Mbit" Hussein.

NTL should actually launch a survey online at their site, or send one out with the BB Bills to find out what the customers DO want.

Dooby 12-12-2003 08:48

Re: Port blocking
 
I think the problem is that at the moment they cant block ports on a user by user basis, its all or nothing.

Rone 12-12-2003 12:08

Re: Port blocking
 
Well if as much effort went into blocking spam, i'd be a happier person. ;)

iadom 16-12-2003 09:04

Re: Port blocking
 
After a couple of weeks without any of the several hundred port 135 scans per day, I have just had 9 in the past few minutes, 50% from Ntl customers. Has port 135 blocking been switched off?

EDIT....OMG. it is as bad as ever, dozens of scans racked up now. at least ten from different customers of the same French ISP.:(

Frank 16-12-2003 10:01

Re: Port blocking
 
Doesn't appear to have been, I'm not getting any scans on that port.

Paul K 16-12-2003 10:08

Re: Port blocking
 
No scans here either... hang on I'm behind a router LOL Ooops ;) Nothing in my router logs though. Might just be someone in France thats infected with a virus again.

iadom 16-12-2003 10:22

Re: Port blocking
 
They should still be blocked though. I have had no 135 scans for weeks now then suddenly in the past hour, loads of them.

Paul K 16-12-2003 10:29

Re: Port blocking
 
Which French ISP is it Iadom?
According to
http://www.ntlworld.com/tunnel.php?task=portBlocking
its blocked ??

iadom 16-12-2003 10:31

Re: Port blocking
 
Quote:

Originally Posted by Paul
Which French ISP is it Iadom?
According to
http://www.ntlworld.com/tunnel.php?task=portBlocking
its blocked ??

See jpeg in previous post. As usual most are from Ntl users, but a significant number are from. Tele2/Swipenet.

Paul K 16-12-2003 10:38

Re: Port blocking
 
Wonder if your section of the network is not configured correctly Iadom, maybe NTL have left that port open to keep you amused;) Have you tried ringing CS to see why that port is active still?

iadom 16-12-2003 10:47

Re: Port blocking
 
Quote:

Originally Posted by Paul
Wonder if your section of the network is not configured correctly Iadom, maybe NTL have left that port open to keep you amused;) Have you tried ringing CS to see why that port is active still?

It does seem strange, as I said I have had no scans on 135 at all since Ntl blocked it, since I booted up just over an hour ago I am up to over 70 now in that time. I know that my firewall keeps me safe, unless anyone else from the N/West reports similar findings I will keep an eye on it before contacting CS.
Perhaps someone is out to get me.;)

iadom 16-12-2003 15:08

Re: Port blocking
 
Just got back in from work, booted up and got 10 hits in first minute to port 135. Is anyone else in this area getting port 135 scans.???? Surely Ntl can't have turned of port blocking just to little old me.:confused:

Wow, now over 40 in five minutes, mainly Ntl users,just phoned CS and they are not aware of any problems and as far as they know port 135 is being blocked.

Sociable 16-12-2003 15:24

Re: Port blocking
 
Just a thought but could be that the source is on the local area and so you get hit before it reaches the point NTL block the port maybe?

iadom 16-12-2003 15:39

Re: Port blocking
 
Quote:

Originally Posted by Sociable
Just a thought but could be that the source is on the local area and so you get hit before it reaches the point NTL block the port maybe?

They are mainly from Ntl users but from all over the country, but there are a lot from all over Europe, mainly from the same French ISP but also Finland, Italy etc.

zovat 16-12-2003 15:50

Re: Port blocking
 
Quote:

Originally Posted by iadom
Just got back in from work, booted up and got 10 hits in first minute to port 135. Is anyone else in this area getting port 135 scans.???? Surely Ntl can't have turned of port blocking just to little old me.:confused:

Wow, now over 40 in five minutes, mainly Ntl users,just phoned CS and they are not aware of any problems and as far as they know port 135 is being blocked.


Just a point - according to the port block list on NTLs website - port 135 is NOT being blocked -


Quote:

Originally Posted by NTL Website
The ports being blocked (inbound only, to stop infections) are: 137 (UDP), 138 (UDP), 139 (TCP), 445 (UDP & TCP), 593 (TCP), 1433 (TCP), 1434 (UDP), 27374 (TCP)

Am I misreading this or is this the case ? :confused:


All times are GMT. The time now is 12:20.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum