MSN\Qwest ships DSL modem with "unconfigurable" firewall

[James Lay <jlay () ameriben com>]

Hey all!

Real quick...just implemented a Cisco VPN concentrator here and lo and
behold certain users couldn't get in.  The concentrator is setup with the
standard UDP port 500.  All users BESIDES MSN\Qwest DSL users could get
right on.  After a few calls and some frustration, Qwest informed us that
the firewall on the DSL router they ship is "unconfigurable"...odd that it
allowed Windows VPN TCP port 1723 but not UDP 500.  I've also heard rumor
that certain online games wouldn't work either with these DSL modems.  Moral
of the Story:  Research your VPN solutions for server AND clients before
implementing ;-)

James Lay
Network Manager/Security Officer
AmeriBen Solutions/IEC Group
Semper Vigilans!!!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html