U-mee ports filters

Created by Walerian Jozefczuk, Modified on Wed, 14 Jun, 2023 at 12:48 PM by Walerian Jozefczuk

Summary

U-mee filters certain ports on your high-speed Internet connection

Details

Reasons For Filtering Ports

Protecting customers – We filter certain ports to protect our customers. This helps protect against certain common worms and malware on our customers' computers that could allow hackers access.
Protecting the rest of the Internet - Some of our filters prevent attacks on other computers on the Internet. u-mee considers preventing the abuse of our network as its responsibility, and we have an obligation to the Internet community to act responsibly.

Port	Transport	Protocol	Direction	Reason for Filtering
25	TCP	SMTP	Both*	SMTP Relays
135	UDP	NetBIOS	Both	Net Send Spam / Pop-ups, Worms
136-139	UDP/TCP	NetBIOS	Both	Worms, Network Neighbourhood
445	TCP	MS-DS/NetBIOS	Both	Worms, Network Neighbourhood
1433	TCP	MS-SQL	Inbound	Worms, Trojans
1434	UDP	MS-SQL	Inbound	Worms, SQLslammer
1900	UDP	MS-DS/NetBIOS	Both	Worms, Network Neighbourhood

Customers should use port 587 to send mail.

Detailed Explanations Of Filtered Ports

Port	Explanation
25 / TCP - SMTP	Mail servers use Simple Mail Transport Protocol (SMTP) to exchange email. We block this to protect upstream bandwidth and prevent customers from running open relays, which could potentially be used by others to send spam via our network.
135, 137 / UDP, 135, 139 / TCP, 445 MS-DC – NetBIOS	NetBIOS, also known as Server Message Block, LanManager, and Common Internet File System, are networked file-sharing protocols. The Microsoft Windows Network Neighbourhood runs over NetBIOS. U-mee filters these ports to protect customers from exposing files on their computers, and to block worms which spread through open file shares. The latest addition to this series, a consolidated service port, such as TCP445, has also opened new similar security risks in Win2K and WinXP.
1433 / TCP, 1434 / UDP – MS-SQL	Microsoft SQL Server is a database application with a long history of security exploits and is noted for the propagation of the SQL slammer worm. These ports are filtered to prevent exploitation and propagation of such MS-SQL exploits.
1900 / UDP - UPnP	Discovery / SSDP is a service that runs by default on WinXP. It creates exploitable security vulnerabilities for any network. Filtering this port proactively prevents XP systems from being remotely compromised by malicious worms or intruders.