If I cant remember what email address I subscribed with - how do I
unsubscribe to this list ?

 

-----Original Message-----
From: ubuntu-au-boun...@lists.ubuntu.com
[mailto:ubuntu-au-boun...@lists.ubuntu.com] On Behalf Of
ubuntu-au-requ...@lists.ubuntu.com
Sent: Thursday, 15 July 2010 13:46
To: ubuntu-au@lists.ubuntu.com
Subject: ubuntu-au Digest, Vol 53, Issue 11

Send ubuntu-au mailing list submissions to
        ubuntu-au@lists.ubuntu.com

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.ubuntu.com/mailman/listinfo/ubuntu-au
or, via email, send a message with subject or body 'help' to
        ubuntu-au-requ...@lists.ubuntu.com

You can reach the person managing the list at
        ubuntu-au-ow...@lists.ubuntu.com

When replying, please edit your Subject line so it is more specific than
"Re: Contents of ubuntu-au digest..."


Today's Topics:

   1. HOW TO: Netcomm NB9WMAXX and Firewall (Basil Chupin)
   2. Re: HOW TO: Netcomm NB9WMAXX and Firewall (Sam Jackson)
   3. Re: HOW TO: Netcomm NB9WMAXX and Firewall (Paul Gear)
   4. Re: HOW TO: Netcomm NB9WMAXX and Firewall
      (Callan Jefferson Davies)
   5. Re: HOW TO: Netcomm NB9WMAXX and Firewall (Basil Chupin)
   6. Re: HOW TO: Netcomm NB9WMAXX and Firewall (Dale)
   7. Re: HOW TO: Netcomm NB9WMAXX and Firewall (Paul Gear)
   8. Peculiar effect with keyboard -solved (David Bowskill)


----------------------------------------------------------------------

Message: 1
Date: Wed, 14 Jul 2010 22:35:33 +1000
From: Basil Chupin <blchu...@iinet.net.au>
Subject: HOW TO: Netcomm NB9WMAXX and Firewall
To: Ubuntu forum <ubuntu-au@lists.ubuntu.com>
Message-ID: <4c3daf15.7010...@iinet.net.au>
Content-Type: text/plain; charset="iso-8859-1"

In the very early hours of this morning (Wednesday) we had here in Canberra
one hell of a wind 'storm' with the result that one of our neighbour' trees
was bought down and short-circuited 2 phases of the power lines. The power
surge took out my modem's power unit.

Today, as replacement, I bought the Netcomm NB9WMAXX (ADSL2+VoIP)
modem/router and now have it working for both ADSL and VoIP.

However, for the first time in ~7 years I now FAIL the ShieldsUp!,
TruStealth, test on grc.com: all ports are in Stealth mode but the FAILure
occurs because the Netcomm accepts and replies to ICMP pings. 
This didn't occur on the Netgear and the Zyxel modems I had before.

The question now is: does anyone know which parameter in this Netcomm I need
to play with - and what are the settings - to stop these responses to pings,
please?

As additional info, I am running Ubuntu Lucid (is there something in Lucid
which could be set? - although I have never had to fiddle with any settings
in Ubuntu before so I believe that this is modem firewall hassle, but then I
am not a network geek :-) ).

Any advise would be greatly appreciated.

BC

--
And God created Woman; and to repent He then created Beer.

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.ubuntu.com/archives/ubuntu-au/attachments/20100714/e28d0961/at
tachment-0001.htm 

------------------------------

Message: 2
Date: Wed, 14 Jul 2010 23:38:07 +0930
From: Sam Jackson <junin.to...@gmail.com>
Subject: Re: HOW TO: Netcomm NB9WMAXX and Firewall
To: Basil Chupin <blchu...@iinet.net.au>
Cc: Ubuntu forum <ubuntu-au@lists.ubuntu.com>
Message-ID: <e515ebe8-5af7-4c51-b504-95127ef6f...@gmail.com>
Content-Type: text/plain; charset="us-ascii"

Hiya Basil,

On 14/07/2010, at 10:05 PM, Basil Chupin wrote:

> The question now is: does anyone know which parameter in this Netcomm I
need to play with - and what are the settings - to stop these responses to
pings, please?

I'm not familiar with that router firmware but there should be an option in
the firewall settings to block ICMP requests. I'm pretty sure my last
Netcomm ADSL/Router had that option.

> As additional info, I am running Ubuntu Lucid (is there something in Lucid
which could be set? - although I have never had to fiddle with any settings
in Ubuntu before so I believe that this is modem firewall hassle, but then I
am not a network geek  :-) ).

You could block ICMP via UFW but, that will not stop your router responding
to the requests, only the Lucid system. And unless you're running a DMZ
directly to said box for some reason, that won't achieve what you want.

As a side note, you may want to see if there is a firmware update available.


Regards,

--
Sam Jackson
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.ubuntu.com/archives/ubuntu-au/attachments/20100714/7014b624/at
tachment-0001.htm 

------------------------------

Message: 3
Date: Thu, 15 Jul 2010 08:28:13 +1000
From: Paul Gear <p...@libertysys.com.au>
Subject: Re: HOW TO: Netcomm NB9WMAXX and Firewall
To: ubuntu-au@lists.ubuntu.com
Message-ID: <4c3e39fd.5050...@libertysys.com.au>
Content-Type: text/plain; charset="iso-8859-1"

On 14/07/10 22:35, Basil Chupin wrote:
> ...
> Today, as replacement, I bought the Netcomm NB9WMAXX (ADSL2+VoIP) 
> modem/router and now have it working for both ADSL and VoIP.
>
> However, for the first time in ~7 years I now FAIL the ShieldsUp!, 
> TruStealth, test on grc.com: all ports are in Stealth mode but the 
> FAILure occurs because the Netcomm accepts and replies to ICMP pings.
> This didn't occur on the Netgear and the Zyxel modems I had before.
> ...
> Any advise would be greatly appreciated.

As far as i can tell from the documentation at
http://www.netcomm.com.au/netcomm-products/voip/nb9wmaxx, there is no way to
disable pings for the WAN interface.

My advice: ignore grc.com. :-)

Paul

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.ubuntu.com/archives/ubuntu-au/attachments/20100715/e911caef/at
tachment-0001.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: paul.vcf
Type: text/x-vcard
Size: 203 bytes
Desc: not available
Url :
https://lists.ubuntu.com/archives/ubuntu-au/attachments/20100715/e911caef/at
tachment-0001.vcf 

------------------------------

Message: 4
Date: Thu, 15 Jul 2010 09:43:10 +0930
From: Callan Jefferson Davies <cal...@cruzn.net.au>
Subject: Re: HOW TO: Netcomm NB9WMAXX and Firewall
To: ubuntu-au@lists.ubuntu.com
Message-ID: <4c3e5296.7010...@cruzn.net.au>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

> My advice: ignore grc.com. :-)


I'll pipe up here and agree with that statement - there's absolutely no need
to go blocking pings.

I work for an ISP (Adam in Adelaide) and get this question a lot from
customers, and also talk to a lot of customers that have gone and blocked
pings.

Here's a couple of items for consideration :

  - people generally want to block pings to be protected against ping
"floods"

  - blocking pings only stops your router from replying to pings, it doesn't
stop someone sending you pings. so a ping flood can still happen.

  - these days, if someone wants to discover you on the Internet, they're
probably going to port-scan you, not ping you. Once they port scan you,
maybe they'll find a (web, mail, ssh etc) server. Then they'll try to
exploit that server. If you're not running any servers, no problem. If you
are running servers, then blocking pings won't offer any benefit.

  - if you're having issues with your Internet connection and you call your
ISP, they're probably going to try a ping to see if your connection is
online. Blocking pings makes technical support difficult!


The above just represents my thoughts, but if anyone reckons I'm wrong about
something please do speak up!

Cheers
Callan



------------------------------

Message: 5
Date: Thu, 15 Jul 2010 11:10:22 +1000
From: Basil Chupin <blchu...@iinet.net.au>
Subject: Re: HOW TO: Netcomm NB9WMAXX and Firewall
To: ubuntu-au@lists.ubuntu.com
Message-ID: <4c3e5ffe.5090...@iinet.net.au>
Content-Type: text/plain; charset=us-ascii; format=flowed

On 15/07/10 10:13, Callan Jefferson Davies wrote:
>> My advice: ignore grc.com. :-)
>>      
>
> I'll pipe up here and agree with that statement - there's absolutely 
> no need to go blocking pings.
>
> I work for an ISP (Adam in Adelaide) and get this question a lot from 
> customers, and also talk to a lot of customers that have gone and 
> blocked pings.
>
> Here's a couple of items for consideration :
>
>    - people generally want to block pings to be protected against ping 
> "floods"
>
>    - blocking pings only stops your router from replying to pings, it 
> doesn't stop someone sending you pings. so a ping flood can still happen.
>
>    - these days, if someone wants to discover you on the Internet, 
> they're probably going to port-scan you, not ping you. Once they port 
> scan you, maybe they'll find a (web, mail, ssh etc) server. Then 
> they'll try to exploit that server. If you're not running any servers, 
> no problem. If you are running servers, then blocking pings won't 
> offer any benefit.
>
>    - if you're having issues with your Internet connection and you 
> call your ISP, they're probably going to try a ping to see if your 
> connection is online. Blocking pings makes technical support difficult!
>
>
> The above just represents my thoughts, but if anyone reckons I'm wrong 
> about something please do speak up!
>
> Cheers
> Callan
>    

Thank you everybody for the responses. I have been assured.

I shall now ignore grc.com :-) .

BC


--
And God created Woman; and to repent He then created Beer.




------------------------------

Message: 6
Date: Thu, 15 Jul 2010 10:55:33 +0930
From: Dale <quail.li...@gmail.com>
Subject: Re: HOW TO: Netcomm NB9WMAXX and Firewall
To: ubuntu-au <ubuntu-au@lists.ubuntu.com>
Message-ID:
        <aanlktikeewaggrfa4fq2cdoyuro4vc5ba0auhbggv...@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On 15 July 2010 10:40, Basil Chupin <blchu...@iinet.net.au> wrote:
> On 15/07/10 10:13, Callan Jefferson Davies wrote:
>>> My advice: ignore grc.com. :-)
>>>
>>
>> I'll pipe up here and agree with that statement - there's absolutely no
>> need to go blocking pings.
>>
>> I work for an ISP (Adam in Adelaide) and get this question a lot from
>> customers, and also talk to a lot of customers that have gone and
>> blocked pings.
>>
>> Here's a couple of items for consideration :
>>
>> ? ?- people generally want to block pings to be protected against ping
>> "floods"
>>
>> ? ?- blocking pings only stops your router from replying to pings, it
>> doesn't stop someone sending you pings. so a ping flood can still happen.
>>
>> ? ?- these days, if someone wants to discover you on the Internet,
>> they're probably going to port-scan you, not ping you. Once they port
>> scan you, maybe they'll find a (web, mail, ssh etc) server. Then they'll
>> try to exploit that server. If you're not running any servers, no
>> problem. If you are running servers, then blocking pings won't offer any
>> benefit.
>>
>> ? ?- if you're having issues with your Internet connection and you call
>> your ISP, they're probably going to try a ping to see if your connection
>> is online. Blocking pings makes technical support difficult!
>>
>>
>> The above just represents my thoughts, but if anyone reckons I'm wrong
>> about something please do speak up!
>>
>> Cheers
>> Callan
>>
>
> Thank you everybody for the responses. I have been assured.
>
> I shall now ignore grc.com :-) .
>

Basil,

I would not go to the point of ignoring grc.com, just use it as a
guide/reference. If you a really worried get a friend to nmap you

for example:
# nmap -sS -sU -O -p 1-65535 -v -P0 <IP_ADDRESS>
Note that nmap command can take a long time

Regards
Dale
-- 
[WWW] http://quail.southernvaleslug.org/
"The significant problems we face cannot be solved at the same level
of thinking we were at when we created them" - Albert Einstein



------------------------------

Message: 7
Date: Thu, 15 Jul 2010 13:04:08 +1000
From: Paul Gear <p...@libertysys.com.au>
Subject: Re: HOW TO: Netcomm NB9WMAXX and Firewall
To: ubuntu-au@lists.ubuntu.com
Message-ID: <4c3e7aa8.7080...@libertysys.com.au>
Content-Type: text/plain; charset="utf-8"

On 15/07/10 11:25, Dale wrote:
> ...
> Basil,
>
> I would not go to the point of ignoring grc.com, just use it as a
> guide/reference. If you a really worried get a friend to nmap you
>
> for example:
> # nmap -sS -sU -O -p 1-65535 -v -P0<IP_ADDRESS>
> Note that nmap command can take a long time
>    

You can make it go a bit faster by specifying "-T Aggressive".
-------------- next part --------------
A non-text attachment was scrubbed...
Name: paul.vcf
Type: text/x-vcard
Size: 213 bytes
Desc: not available
Url :
https://lists.ubuntu.com/archives/ubuntu-au/attachments/20100715/6ae7ff87/at
tachment-0001.vcf 

------------------------------

Message: 8
Date: Thu, 15 Jul 2010 13:46:18 +1000
From: David Bowskill <david...@tpg.com.au>
Subject: Peculiar effect with keyboard -solved
To: ubuntu-au@lists.ubuntu.com
Message-ID: <4c3e848a.3020...@tpg.com.au>
Content-Type: text/plain; charset=ISO-8859-1

Hello All

Thanks to all who have replied on this curious problem, for which I have
found the cure on the internet.

The effect was that I could login on the GDM screen but when Xwindows
started, pressing any key would only produce an alert sound. This effect
suddenly appeared one day.

Postings on the Ubuntu Forum (from where I got the cure) showed a few
people have experienced this before.

The cure was; within Xwindows press Ctrl+Alt+F1 (worked within X despite
the 'alert').
Now in command line mode, run 'sudo aptitude install sandwich'.

I would appreciate if anyone could explain to me as to what 'sandwich'
is and how it works?

Many thanks
David Bowskill






------------------------------

-- 
ubuntu-au mailing list
ubuntu-au@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-au


End of ubuntu-au Digest, Vol 53, Issue 11
*****************************************


-- 
ubuntu-au mailing list
ubuntu-au@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-au

Reply via email to