Date: Wed, 21 Jan 2004 21:19:33 +0100 (CET) From: Cordula's Web <cpghost@cordula.ws> To: fbsd_user@a1poweruser.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: how to tell if my ISP is blocking email & web ports Message-ID: <20040121201933.ED78840861@fw.farid-hajji.net> In-Reply-To: <MIEPLLIBMLEEABPDBIEGEEINFFAA.fbsd_user@a1poweruser.com> References: <MIEPLLIBMLEEABPDBIEGEEINFFAA.fbsd_user@a1poweruser.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> I am thinking about enabling my gateway's sendmail email
> server to receive email directly from the public internet and
> also installing apache to serve my own home page.
That's a common setup.
> I have 24/7 cable internet connection plus an registered
> domain name which goes no place right now.
>
> I know I can not ask my ISP's tech support if they block
> ports 110, 25, and 80, because they will get suspicious
> and monitor my account. Want to stay under their radar.
Switch to an ISP that doesn't object to you running servers.
If you violate your ISP's AUPs, they'll simply cut you off.
Some ISPs run port scans or log their users' traffic, so
you may end up appearing on their radar anyway.
> So I need a way to test if the ports are blocked or not using an
> friends PC and my current IP address.
Just start your servers, and check wether you can reach them
from the outside.
> What do you recommend?
* Track -STABLE or -CURRENT regularly, esp. after security
advisories.
* Open as few ports as possible to the outside ("sockstat -46"
is your friend).
* It's your responsiblity to check that you don't operate an
open relay!
You should monitor your box closely (i.e. use tripwire etc...),
and tread on the side of caution.
--
Cordula's Web. http://www.cordula.ws/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040121201933.ED78840861>