Security Basics mailing list archives
RE: Modem connection
From: "David Gillett" <gillettdavid () fhda edu>
Date: Mon, 11 Aug 2003 09:22:04 -0700
The "proper" way for this sequence to work is something like <three seconds no activity> +++ <three seconds no activity> ATH0 which would be impossible to send to you over a TCP/IP session. But the inactivity timing is covered by a Hayes patent, and a few cheap modem manufacturers chose not to license the patent. I'm surprised to hear that any of these cheap makers survived late enough to release a 56K product! I do think that if you spent just a couple bucks more on a modem, you wouldn't have this problem. Assuming, though, that you can't replace the modem with something that really works,
.... Uner linux i found that that command can be disabled via querying the modem.
The modem doesn't care what OS you're running. Having found the command to disable this behaviour, add it to the dialling (or initialization) string you use, so it happens every time you go online. End of problem. David Gillett
-----Original Message----- From: none [mailto:ice4ice () excite com] Sent: August 8, 2003 21:43 To: security-basics () securityfocus com Subject: Modem connection hi, i'm a simple man, i can't affort anything faster than 56k :> I'm running XP, with Forton Firewall; the problem i occured that packets can be sent to me with +++ATHO, which will nicelly disconnect me. Uner linux i found that that command can be disabled via querying the modem. Some of the ICMP senders will do it to 135 port; disabling the whole protocol won't do it. We tried it. I don't think that the firewall is actually catching the packets, before they reach modem :> ,so i'm trapped, trying different software won't help, eg BlackIce didn't help. My mate tried from freeBSD, by going on higher port (cant remember) and disconnecting me, but ip ban solved that. Q. is there an answer to that? i can't setup a hardware firewall, and i need windows to run more often than linux (for the time being.) Can someone send a link for more info on ICMP? Thanks, and sorry for my poor english.
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Modem connection none (Aug 11)
- RE: Modem connection David Gillett (Aug 11)
- Re: Modem connection Brad Mills (Aug 11)
- <Possible follow-ups>
- RE: Modem connection Tim Donahue (Aug 11)