Wow. Sounds like you're dealing with some mighty unreasonable people here... Frankly, the first thing that I'd do is look for a new ISP! (And maybe a new employer, while I was at it.)
Assuming those aren't options: 0) Did you try port 443? That's HTTPS, which many admins seem to forget about... 1) Maybe you can negotiate with your ISP? Do they offer different plans (that you can afford) or a static IP w/ fewer restrictions? 2) Are they blocking *UDP* ports? There's this thing I've read about lately called OpenVPN that uses UDP transport, which they might be a little more lax about... 3) nmap is the (or at least *a*) tool to use (nessus may work as well.) You'd want to use it from a remote system (preferably the one at work.) The only problem is, you'll have to figure out some way of opening every port on your home system--well, that and the fact that an alert admin might notice and give you grief. Maybe xinetd, but I don't see an easy way of doing it. Maybe that's not necessary--it might be possible to have nmap report the ports that are "closed" (meaning that the target system is saying that they're closed, which would imply that it noticed the connection attempt and politely refused) as opposed to "filtered" (no response at all.) You may need to tweak iptables, such that the default input response is REJECT, so that an error packet is returned. HTH, -Jason On Wednesday 13 August 2003 10:09 pm, Jo�o Candido Araujo Milasch Filho wrote: > Well. I got an answer to my problem. About a year ago, my adsl provider > blocked about all reserved ports, and thats why I can't use'em. Although > I told you before that they were unblocked by the ISP. Then, I fall on > another problem: The work's firewall! So, I'll need to get a list of > unblocked outbound ports. Is there any way to see what outbound ports > are unblocked? We got some sites that scan my incoming ports. Thats not > hard to make a program that scan for outgoing ports, but I kind of not > have time to do so. > If anyone knows how how to look for outgoing unblocked ports, tell me, > because the network admins dont want to just give me a port that I can > use. ;( > > Thanks all for the answers. > > PlugHead wrote: > >On Tuesday 12 August 2003 10:56 pm, Greg Meyer wrote: > >>On Tuesday 12 August 2003 10:11 pm, Jo�o Candido A. Milasch Filho wrote: > >>>Hi! I sent this message b4 to newbie list, but I got absolute no answer. > >>>I hope someone can help me here... > > > ><SNIP> > > > >>>Anyone knows what can I do to figure out whats happening? > >> > >>Is your isp blocking inbound traffic on port 80 to prevent web servers > >> from running on the network? That would be a cruel catch 22 if it is > >> true. Work only allows outbound on port 80, while home allows all > >> inbound but port 80. > > > >Actually, it could be worse than that. You may not even have a "real" ip > >address. Sometime an ISP will act as subnet on the internet, in order to > >conserve IP addresses (much like a local router would do, but on a larger > >scale.) If you're on a dial-up connection, this is most likely the case, > > and may be even if you have a "broadband" connection. If your IP address > > starts with 192. or 10., that's a dead giveaway, but there are other > > reserved ranges as well that I don't know off the top of my head. > > > >Can your friends ping your ip address? If so, this is not (probably, > > unless they're really ping'ing someone else) your problem. > > > >-Jason > > > >========================= > >When treading water in a circle of sharks, a wizard will always consider > > other wizards to be the most immediate danger. > >(The Last Continent) > > > > > > > > > >------------------------------------------------------------------------ > > > >Want to buy your Pack or Services from MandrakeSoft? > >Go to http://www.mandrakestore.com -- ========================= I AM DEATH, NOT TAXES. *I* TURN UP ONLY ONCE. (Feet of Clay)
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
