full-disclosure - MSN\Qwest ships DSL modem with "unconfigurable" firewall

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <6CDD95AD0FF2D311BC6A009027DC6B9903DD3762@MAIL1>
From: jlay at ameriben.com (James Lay)
Subject: MSN\Qwest ships DSL modem with "unconfigurable" firewall

Hey all!

Real quick...just implemented a Cisco VPN concentrator here and lo and
behold certain users couldn't get in.  The concentrator is setup with the
standard UDP port 500.  All users BESIDES MSN\Qwest DSL users could get
right on.  After a few calls and some frustration, Qwest informed us that
the firewall on the DSL router they ship is "unconfigurable"...odd that it
allowed Windows VPN TCP port 1723 but not UDP 500.  I've also heard rumor
that certain online games wouldn't work either with these DSL modems.  Moral
of the Story:  Research your VPN solutions for server AND clients before
implementing ;-)

James Lay
Network Manager/Security Officer
AmeriBen Solutions/IEC Group
Semper Vigilans!!!