Re: what can be done against isp blocking ports

2008-03-30 Thread sara fink
Hi Gil

OMG,  I can't believe what I am hearing. You had to ask her which kind
of electronic chip you have to insert in the pc. Just to bend her on
knees.  It reminds me of the BOFH (bastard operator from hell) jokes.
http://bofh.ntk.net/Bastard.html Try it sometimes if you want to get a
really good laugh. The first chapters are fantastic.

The sad thing is that I work without firewall and I still get stardust. ;-(

On 3/30/08, Gil Freund [EMAIL PROTECTED] wrote:
 On Sun, Mar 30, 2008 at 1:25 AM, sammy ominsky [EMAIL PROTECTED] wrote:
  On 30/03/2008, at 00:14, Gil Freund wrote:
 
   My two recent favorites from an ISP support tech:
   1. You can have dhcp on you cable connection, it requires an
   electronic chip installed in the computer.
 
  I have to know, what was the context that gave birth to this gem?

 Netvision made some changes to it's L2TP server which caused
 connectivity issues to one of our users at home. After getting
 conflicting (and apparently incorrect) information on dialup setting,
 I asked them simply to switch her to DHCP, and avoid the hassle of
 end-user configuration.

 
  --sambo
 

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-30 Thread Gilboa Davara

On Sun, 2008-03-30 at 00:14 +0300, Gil Freund wrote:
 On Thu, Mar 27, 2008 at 5:46 AM, Gilboa Davara [EMAIL PROTECTED] wrote:
  On 3/25/08, Maxim Veksler [EMAIL PROTECTED] wrote:
   [snip]
 
I can verify this is an ISP issue, because :
 
 There used to a way to create an ad-hoc ADSL connection to Bezeq, and
 select an ISP from a web page. I can't recall the procedure, but this
 a very usful way to check for local misconfiguration claims by the
 ISP.
 
 My two recent favorites from an ISP support tech:
 1. You can have dhcp on you cable connection, it requires an
 electronic chip installed in the computer.

Do I hear Netvision?


 2. Remove all antivirus and firewalling and connect to the internet.

Yep. I do hear Netvision...

- Gilboa



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-30 Thread Geoff Shang

Hi everyone,

I've been following this thread with great interest.  As a relative 
newcomer to Israel (I've been here 11 months), I'm only vaguely aware of 
some of the most prominent ISPs.  I'm also aware that a few of them have 
murged recently.  No-one here really seems to like any of the big ones much 
by the looks of things.


My wife and I are currently on contract through Hot and Barak.  But our 
contract will be up in a few weeks.  So we're ISP shopping and I'd be 
interested in recommendations for the best (or least worst) ISPs.


Geoff.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-30 Thread Geoffrey S. Mendelson
On Sun, Mar 30, 2008 at 04:15:58PM +0200, Geoff Shang wrote:
 
 My wife and I are currently on contract through Hot and Barak.  But our 
 contract will be up in a few weeks.  So we're ISP shopping and I'd be 
 interested in recommendations for the best (or least worst) ISPs.

I've had no problens with Netvision. They were my second choice. We 
used IBM until they sold their network to ATT and eventually stopped
accepting Israeli credit cards.

Service is good, the connection is reasonably reliable and fast.
They do not block or limit bit torrent, I've occasionaly gotten
over 300k bytes per second download. With FTP or HTTP, I see
often as much as 400k bytes per second.


Note that I do not speak enough Hebrew to speak to them in anything
except English.

Geoff.
-- 
Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED]  N3OWJ/4X1GM

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-29 Thread Gil Freund
On Thu, Mar 27, 2008 at 5:46 AM, Gilboa Davara [EMAIL PROTECTED] wrote:
 On 3/25/08, Maxim Veksler [EMAIL PROTECTED] wrote:
  [snip]

   I can verify this is an ISP issue, because :

There used to a way to create an ad-hoc ADSL connection to Bezeq, and
select an ISP from a web page. I can't recall the procedure, but this
a very usful way to check for local misconfiguration claims by the
ISP.

My two recent favorites from an ISP support tech:
1. You can have dhcp on you cable connection, it requires an
electronic chip installed in the computer.
2. Remove all antivirus and firewalling and connect to the internet.


  [snip]

   We've spoke to 012 representative, it's always the same automatic
answer they have been instructed to provide: Problem with your
computer, spyware, virus, wrong usage No point in arguing with the
poor technical support guy because he a. Can't help you. B. Probably
does not have the slightest clue about what you are talking about.
  

  I'm seeing the same. (Computer games; P2P; etc).
  I did manage to scare one of the poor tech support people into letting
  me speak to one on their senior support engineer that more-or-less
  confirmed that 012 is throttling/blocking/resetting/etc traffic during
  peak hours, but refused to name the protocols/ports being blocked.


This leads me to the conclusion that nothing can be done besides
leaving the company that insists on hurting it's costumers and join
Bezeq, who may or may not be the best ISP around but at least they
aren't using technology to hide cowardly acts from their users. I for
one have lost my faith in 012 completely, I will not let this slip and
have already started the procedure of disconnecting from 012 ASAP. I
will also make sure all my friends + parents + who ever I can advice
on ISP choosing to reconsider their decision based on the above.
  
Maxim.

  /+1. (Currently ISP-shopping)
  Though I'd venture and guess that it's just of matter of time before
  they all start traffic shaping.

  - Gilboa



  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-29 Thread sammy ominsky

On 30/03/2008, at 00:14, Gil Freund wrote:


My two recent favorites from an ISP support tech:
1. You can have dhcp on you cable connection, it requires an
electronic chip installed in the computer.


I have to know, what was the context that gave birth to this gem?

--sambo

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-29 Thread Gil Freund
On Sun, Mar 30, 2008 at 1:25 AM, sammy ominsky [EMAIL PROTECTED] wrote:
 On 30/03/2008, at 00:14, Gil Freund wrote:

   My two recent favorites from an ISP support tech:
   1. You can have dhcp on you cable connection, it requires an
   electronic chip installed in the computer.

  I have to know, what was the context that gave birth to this gem?

Netvision made some changes to it's L2TP server which caused
connectivity issues to one of our users at home. After getting
conflicting (and apparently incorrect) information on dialup setting,
I asked them simply to switch her to DHCP, and avoid the hassle of
end-user configuration.


  --sambo


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-26 Thread Gilboa Davara
On 3/25/08, Maxim Veksler [EMAIL PROTECTED] wrote:
[snip]
  I can verify this is an ISP issue, because :
[snip]
  We've spoke to 012 representative, it's always the same automatic
  answer they have been instructed to provide: Problem with your
  computer, spyware, virus, wrong usage No point in arguing with the
  poor technical support guy because he a. Can't help you. B. Probably
  does not have the slightest clue about what you are talking about.


I'm seeing the same. (Computer games; P2P; etc).
I did manage to scare one of the poor tech support people into letting
me speak to one on their senior support engineer that more-or-less
confirmed that 012 is throttling/blocking/resetting/etc traffic during
peak hours, but refused to name the protocols/ports being blocked.

  This leads me to the conclusion that nothing can be done besides
  leaving the company that insists on hurting it's costumers and join
  Bezeq, who may or may not be the best ISP around but at least they
  aren't using technology to hide cowardly acts from their users. I for
  one have lost my faith in 012 completely, I will not let this slip and
  have already started the procedure of disconnecting from 012 ASAP. I
  will also make sure all my friends + parents + who ever I can advice
  on ISP choosing to reconsider their decision based on the above.

  Maxim.

/+1. (Currently ISP-shopping)
Though I'd venture and guess that it's just of matter of time before
they all start traffic shaping.

- Gilboa

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-25 Thread Geoffrey S. Mendelson
On Tue, Mar 25, 2008 at 12:56:37AM +0200, sara fink wrote:
 My ISP is 012. They claim that they don't block ports and they can't
 block ports. Something is on my computer. Viruses, spyware,
 firewall. My firewall is disabled. And I am connected through the
 modem only.  Yet only 1 port is open.

Exactly how do you connect to them? By law in Israel, bot BEZEQ and HOT
can not connect you to the Internet. They can only connect you to a
licensed ISP.

In order to get around that, you connect to your ISP using a VPN.
(Virtual private network). In Linux terms, it's over a tunnel.

If you have a cable modem and a willing ISP, you don't need a tunnel,
because HOT can route all of your packets to your ISP. AFAIK, they no
longer will do this for new customers, or old ones that want to change.

The most common way of connecting to an ISP over an aDSL line is via an
L2TP tunnel with a Windows computer being at your end of the tunnel.
Other protocols such as PPOA and PPOE are also used.

The easiest way to handle it IMHO is for the small user to buy a cheap
router and let it handle the tunneling.

I started out with a Pentium 133 as my router when I got a cable modem a
long time ago, and have long since upgraded it. It's not as easy to
maintain, but it gives me more flexibility.

BEZEQ has some deal where you can get a wireless router from them, with
support, for around 10NIS a month, if you commit to two years. If you
are interested don't ask me for details, but please post what you find
out.

 
 What can I do in this case? Proxy client, server on the pc? Use proxy
 from the internet? Port forward? Besides browsing I need the p2p.

I was faced with a similar situation accessing a local government
website in the U.S. For some silly reason, they blocked access to it
from overseas. Their sysadmin must have been on the mailing list I asked
for advice in a week or two it was fixed. :-)

Meanwhile I found out that you can run SSH as a remote SOCKS proxy. If
you can access a system somewhere else with SSH, and they let you, it's
a way of accessing sites blocked to you.

For FireFox there is an add-on called foxyproxy, which picks the proxy
based upon the URL, and for windows there is a public domain SOCKS
tunnel. I have not seen one for Linux, only programs modified to use
SOCKS. If anyone can add anything, I would appriciate it.

Geoff.


-- 
Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED]  N3OWJ/4X1GM

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-25 Thread Maxim Veksler
On Tue, Mar 25, 2008 at 12:56 AM, sara fink [EMAIL PROTECTED] wrote:
 My ISP is 012. They claim that they don't block ports and they can't
 block ports. Something is on my computer. Viruses, spyware,
 firewall. My firewall is disabled. And I am connected through the
 modem only.  Yet only 1 port is open.

 What can I do in this case? Proxy client, server on the pc? Use proxy
 from the internet? Port forward? Besides browsing I need the p2p.

 Any ideas how to solve this problem will be appreciated.


There is nothing currently to do about this, the correct technical
term for what 012 are doing is Deep Packet Inspection. They are
probably using something like [1] to QOS p2p traffic.  They are not
blocking ports, they are reading the content of your traffic and
analyzing it in real time, these packets that are labeled as low
priority get Throttled.


I'm also connected to 012 using HOT, for the last 3 months I'm
experiencing an ever degrading performance of popular file sharing
protocols such as ed2k and bit torrent. It get's to such ridicules
rates as 3KB/s.

I can verify this is an ISP issue, because :

a. I've made an experiment with my fellow college where we started
downloading the same popular file, each from his own home
simultaneously. He is connected via Bezeq+ADSL and I'm through
012+HOT. My download rate was 6Kb/s (max) while his maintained an
steady rate of 55Kb/s. We're both connected using a Linksys Router,
and made proper checking before started the test: Ports have been
forwarded and verified to be allow connect(), other network devices
have been disconnected. No other downloads / uploads were active.

b. I've talked to 2 other friends at work, who are also connected
using 012 and are reporting to experience the exact same service
disrupts as I am.

c. Please read these forum posts, discussing this issue :
- http://forum.bgu.co.il/index.php?showtopic=165231pid=1673953
- 
http://209.85.135.104/search?q=cache:UV5wN3Sg4rYJ:selectv.net/lofiversion/index.php/t37336.html+012+%D7%97%D7%95%D7%A1%D7%9E%D7%99%D7%9Dhl=enct=clnkcd=9client=firefox-a


We've spoke to 012 representative, it's always the same automatic
answer they have been instructed to provide: Problem with your
computer, spyware, virus, wrong usage No point in arguing with the
poor technical support guy because he a. Can't help you. B. Probably
does not have the slightest clue about what you are talking about.

This leads me to the conclusion that nothing can be done besides
leaving the company that insists on hurting it's costumers and join
Bezeq, who may or may not be the best ISP around but at least they
aren't using technology to hide cowardly acts from their users. I for
one have lost my faith in 012 completely, I will not let this slip and
have already started the procedure of disconnecting from 012 ASAP. I
will also make sure all my friends + parents + who ever I can advice
on ISP choosing to reconsider their decision based on the above.


Maxim.


[1] http://www.cyberoam.com/contentfiltering.html


p.s.

The solution to this problem is passing your traffic encrypted, i.e.
SSL. The problem here that all traffic then must be TCP which is
actually bad for the Operator as it increases the bandwidth usage.

-- 
Cheers,
Maxim Veksler

Free as in Freedom - Do u GNU ?

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: what can be done against isp blocking ports

2008-03-25 Thread sara fink
Thanks Maxim. They were OK in the begining. And what about the
following things:
1. Change ports, like 6 something random?
2. Encryption I can do in ftp.
3. Some kind of tunneling that traffic will be recognized as legit http.
4. Proxy?

I also have a linksys router. When I experienced the packet loss it
was on a hot server.
adsl gives support to linux? The only thing is that adsl is much more
expensive.

what p2p work with encryption? I mainly use dc++.

On 3/25/08, Maxim Veksler [EMAIL PROTECTED] wrote:
 On Tue, Mar 25, 2008 at 12:56 AM, sara fink [EMAIL PROTECTED] wrote:
  My ISP is 012. They claim that they don't block ports and they can't
  block ports. Something is on my computer. Viruses, spyware,
  firewall. My firewall is disabled. And I am connected through the
  modem only. Yet only 1 port is open.
 
  What can I do in this case? Proxy client, server on the pc? Use proxy
  from the internet? Port forward? Besides browsing I need the p2p.
 
  Any ideas how to solve this problem will be appreciated.
 

 There is nothing currently to do about this, the correct technical
 term for what 012 are doing is Deep Packet Inspection. They are
 probably using something like [1] to QOS p2p traffic. They are not
 blocking ports, they are reading the content of your traffic and
 analyzing it in real time, these packets that are labeled as low
 priority get Throttled.


 I'm also connected to 012 using HOT, for the last 3 months I'm
 experiencing an ever degrading performance of popular file sharing
 protocols such as ed2k and bit torrent. It get's to such ridicules
 rates as 3KB/s.

 I can verify this is an ISP issue, because :

 a. I've made an experiment with my fellow college where we started
 downloading the same popular file, each from his own home
 simultaneously. He is connected via Bezeq+ADSL and I'm through
 012+HOT. My download rate was 6Kb/s (max) while his maintained an
 steady rate of 55Kb/s. We're both connected using a Linksys Router,
 and made proper checking before started the test: Ports have been
 forwarded and verified to be allow connect(), other network devices
 have been disconnected. No other downloads / uploads were active.

 b. I've talked to 2 other friends at work, who are also connected
 using 012 and are reporting to experience the exact same service
 disrupts as I am.

 c. Please read these forum posts, discussing this issue :
 - http://forum.bgu.co.il/index.php?showtopic=165231pid=1673953
 -
 http://209.85.135.104/search?q=cache:UV5wN3Sg4rYJ:selectv.net/lofiversion/index.php/t37336.html+012+%D7%97%D7%95%D7%A1%D7%9E%D7%99%D7%9Dhl=enct=clnkcd=9client=firefox-a


 We've spoke to 012 representative, it's always the same automatic
 answer they have been instructed to provide: Problem with your
 computer, spyware, virus, wrong usage No point in arguing with the
 poor technical support guy because he a. Can't help you. B. Probably
 does not have the slightest clue about what you are talking about.

 This leads me to the conclusion that nothing can be done besides
 leaving the company that insists on hurting it's costumers and join
 Bezeq, who may or may not be the best ISP around but at least they
 aren't using technology to hide cowardly acts from their users. I for
 one have lost my faith in 012 completely, I will not let this slip and
 have already started the procedure of disconnecting from 012 ASAP. I
 will also make sure all my friends + parents + who ever I can advice
 on ISP choosing to reconsider their decision based on the above.


 Maxim.


 [1] http://www.cyberoam.com/contentfiltering.html


 p.s.

 The solution to this problem is passing your traffic encrypted, i.e.
 SSL. The problem here that all traffic then must be TCP which is
 actually bad for the Operator as it increases the bandwidth usage.

 --
 Cheers,
 Maxim Veksler

 Free as in Freedom - Do u GNU ?


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



what can be done against isp blocking ports

2008-03-24 Thread sara fink
My ISP is 012. They claim that they don't block ports and they can't
block ports. Something is on my computer. Viruses, spyware,
firewall. My firewall is disabled. And I am connected through the
modem only.  Yet only 1 port is open.

What can I do in this case? Proxy client, server on the pc? Use proxy
from the internet? Port forward? Besides browsing I need the p2p.

Any ideas how to solve this problem will be appreciated.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]