RE: Modem connection

From: Tim Donahue (TDonahue_at_haynesconstruction.com)
Date: 08/11/03

  • Next message: Simon: "RE: Network scanning"
    To: "'ice4ice@excite.com'" <ice4ice@excite.com>, security-basics@securityfocus.com
    Date: Mon, 11 Aug 2003 11:50:40 -0400
    
    

    Inline.

    > -----Original Message-----
    > From: none [mailto:ice4ice@excite.com]
    > Sent: Saturday, August 09, 2003 12:43 AM
    > To: security-basics@securityfocus.com
    > Subject: Modem connection
    >
    >
    >
    >
    >
    > hi, i'm a simple man, i can't affort anything faster than 56k
    > :> I'm running XP, with Forton Firewall; the problem i
    > occured that packets can be sent to me with +++ATHO, which
    > will nicelly disconnect me. Uner linux i found that that
    > command can be disabled via querying the modem. Some of the
    > ICMP senders will do it to 135 port; disabling the whole
    > protocol won't do it. We tried it.
    > I don't think that the firewall is actually catching the
    > packets, before they reach modem :> ,so i'm trapped, trying

    In order for the firewall to scan the packets, the computer has to accept
    the packet to have it scanned by the firewall software. Sounds like it
    might be a driver bug, but that is just a guess.

    > different software won't help, eg BlackIce didn't help. My
    > mate tried from freeBSD, by going on higher port (cant
    > remember) and disconnecting me, but ip ban solved that. Q. is
    > there an answer to that? i can't setup a hardware firewall,
    > and i need windows to run more often than linux (for the time being.)
    > Can someone send a link for more info on ICMP?

    Google. The first 3 results from a query of "ICMP" look like they are a good
    place to start. Especially the RFC defining ICMP.

    > Thanks, and sorry for my poor english.
    >
    > _______________________________________________
    > Eliminate pop-ups before they appear!
    > Visit www.PopSwatter.com now - It's FREE.
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > --------------
    >
    >

    Tim Donahue

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Simon: "RE: Network scanning"

    Relevant Pages

    • Re: Strange PPPoe problem
      ... The new service uses PPPoe - not a problem, or so I thought - I ... have PPPoe on my firewall. ... And if I do PPPoe on the provided D-Link router, ... like icmp 3/4 packets are being dropped somewhere. ...
      (Debian-User)
    • Re: network problems 7.0-p3: sendto: Operation not permitted
      ... This usually indicates firewall rules on the local machine, ... This indicates a high number of ICMP packets being received. ... 1 into my cable modem and nother into a linksys 16port vpn router. ... 01:47:12.196000 arp who-has 181.131.216.67.181.static.hargray.net tell ...
      (freebsd-stable)
    • Re: ICMP timestamp request is allowed from arbitrary hosts
      ... There is no registry entry that specifically blocks individual ICMP types on ... enable the Windows Firewall on the XP machines and configure the rules to do ... Point is Windows XP has the ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Am I being hacked?
      ... > incoming TCP packets are 'Allowed' on those ports. ... The term "stealth" is misleading. ... The online services that claim to test your firewall can be misleading ... but block normal ICMP echo requests. ...
      (comp.security.firewalls)
    • iptables troubles
      ... I am trying to get a firewall running, but I am no networking expert. ... # ICMP Host-unreachable deny ... # We dont want ICMP Dead Errors ...
      (Debian-User)