Home · Compatibility Lists · Support Forums · FAQ · News Archive · Articles · Submit News/Upcoming News
NT Compatible
advertisement


Forum overview » Networking » Charter.net cable open ports (1/2)

Reply New Poll

2 pages 1 2

Charter.net cable open ports
Author Message
mthaler
Member


Posts: 89
Joined: 2000-08-24
Member No.: 4250
Icon 2003-01-25 15:46:55

I just switched from DSL to cablemodem (I am already starting to regret it) because the 1.5mb cable service was cheaper WITH cable TV than DSL 1.5mb without. (About $109 with all the premium stations).
Unfortunately I discovered that they seem to block most incoming ports.
I would like to be able to use either PCanywhere or VNC to get to my machine while on the road.
I have tried but those ports are blocked. Does anybody know what ports they leave open on that network?
BTW, I am using Charter.net in Central Wisconsin.

Thanks for any info

BTW, I had this all working beautifully before with the DSL :-(

Post #119209
Edit Quote Print Solution Plonk Delete
adamvjackson
Senior Member


Posts: 2174
From: Asheville, NC
Joined: 2002-08-26
Member No.: 12643
Icon 2003-01-25 22:24:36

All I know that is blocked on charter's non-commercial accounts is 25, 80, 110. Are you sure you have configured your gateway/router correctly to forward the VNC port (~5000 series by default)?

Post #119216
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-01-27 14:40:48

Try this tool:

http://www.analogx.com/contents/download/network/pmapper.htm



* I know that university students for example beat their LAN routers & gateways by routing app requests thru other ports using it... even blocked ports!

(Will it work for an ISP/BSP that does that? I don't know, but it's as close a fix as I can think of to try out!)

APK

P.S.=> It seems to make apps that are not SOAP & .NET (MS stuff) or Websnap/Datasnap (borland stuff with SOAP but better) work like that does... apk

Post #119306
Edit Quote Print Solution Plonk Delete
DS3Circuit
Senior Member


Posts: 739
From: Northeast PA
Joined: 2002-12-11
Member No.: 16192
Icon 2003-01-27 19:33:42

http://www.http-tunnel.com/HT_Products_HTTPTunnelClient.asp

Cause we all know port 80 is open ... well 96% percent of the time

Post #119333
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-01-27 21:32:36

"http://www.http-tunnel.com/HT_Products_HTTPTunnelClient.asp

Cause we all know port 80 is open ... well 96% percent of the time "


This one & the one I put up seem to have the SAME idea... anyone ever try both?

(Heh, I ask... because I have YET to use either, I just know what they're for really!)

* Sounds like the SAME idea on both applications:

Beat restricted networks, making apps that are NOT "SOAP" or "WebSnap/DataSnap" applications get their port requests routed to port 80...

Just like Ms' SOAP type apps &/or Borland's DataSnap/WebSnap will do (but again, more flexibly than MS stuff) natively!



APK

Post #119337
Edit Quote Print Solution Plonk Delete
DS3Circuit
Senior Member


Posts: 739
From: Northeast PA
Joined: 2002-12-11
Member No.: 16192
Icon 2003-01-27 21:41:28

http tunnel was used in our "educational environment" to TRY to circumvent our packeteer box.

Post #119338
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-01-27 21:58:50

"http tunnel was used in our "educational environment" to TRY to circumvent our packeteer box."


Heh, good one:

"Educational Environment"

(LOL, spelled sideways: our hacking of ourselves & try to burn one of our OWN restrictions part of the schema of our network environment to test it out!)

Right? Just guessing if that is what you mean... or perhaps, testing a new tool!



* I bet either would work here for him, they are worth a shot... they DO sound the same here!

APK

P.S.=> Only thing is, this is NOT on a local LAN, but trying to beat his ISP/BSP restrictions... I wonder if it'd work? It should... those are just large LANS/WANS really anyways so the principles are same there too! apk

Post #119340
Edit Quote Print Solution Plonk Delete
mthaler
Member


Posts: 89
Joined: 2000-08-24
Member No.: 4250
Icon 2003-02-01 01:29:10

OK, it appears that maybe when I started out, Charter was blocking more ports because of the slammer worm this weekend.

It appears now that they block servers on 21, 80, and POP & SMTP.

I have no problem getting VNC to work with ports 5800 & 5900.

Howerver, I have not been able to get an FTP server to work. I have been testing this by using PCanywhere to go to one of the sites I have to help, then trying to FTP back.
On my end I am running FTP_Server_U.
I have tried setting it to port 2100 and I opened up 2099 and 2100 on the router as I understand (or hope I understand) that FTP uses the main port and that port -1.
At any rate, using internet explorer, I do an
ftp://my.ip.address:2100 and it lets me start to log in, but then it stalls when it tries to scan the directories.
Any clues as to what is going on there?

Thanks

Post #119591
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-02-01 14:11:40

"OK, it appears that maybe when I started out, Charter was blocking more ports because of the slammer worm this weekend.

It appears now that they block servers on 21, 80, and POP & SMTP."


Makes sense... because of the worm, & because lol, if you're not a business account, they probably don't want you running a server odds are (not without them getting a cut or more cash from you).

21 FTP cutoff I can see, because of file piracy I can see them cutting that RIGHT off as well. The reasoning being "suspect the worst & do what you have to do to prevent it etc."

"I have no problem getting VNC to work with ports 5800 & 5900."


That's good! You have a tool that works for you...

"Howerver, I have not been able to get an FTP server to work. I have been testing this by using PCanywhere to go to one of the sites I have to help, then trying to FTP back.

On my end I am running FTP_Server_U. "


You'll probably have to talk to someone that uses that, I don't!

"I have tried setting it to port 2100 and I opened up 2099 and 2100 on the router as I understand (or hope I understand) that FTP uses the main port and that port -1.

At any rate, using internet explorer, I do an
ftp://my.ip.address:2100 and it lets me start to log in, but then it stalls when it tries to scan the directories.
Any clues as to what is going on there?

Thanks"


Is your FTP client using PASV mode? That sometimes helps with FTP servers & such... check to see if it does, I think IE can be setup to do that for FTP directories browsing & I KNOW that clients like SmartFTP can do that in their settings!

APK

Post #119625
Edit Quote Print Solution Plonk Delete
mthaler
Member


Posts: 89
Joined: 2000-08-24
Member No.: 4250
Icon 2003-02-02 17:41:25

I have been pounding on this ALL day, and no joy whatsoever.
The GOAL is to be able to download files when I am out in the field.
Things I CAN get going:
http if i use a high port, like 5700
vnc using it's standard ports
What I can't get going is an FTP server.
I have tried several servers including FTP serv-u and WS_FTP's server.
I have done port forwarding etc.
Charter clearly locks the use of port's 20&21.

I am now thinking that maybe I should just use some alternative program, not FTP, but it would be nice if I did not have to install a client program which was the beauty of FTP.

Any suggestions for accessing files (VNC does not) remotely on a non-standard port?

Thanks

Post #119699
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-02-02 18:09:52

"I have been pounding on this ALL day, and no joy whatsoever.
The GOAL is to be able to download files when I am out in the field.
Things I CAN get going:
http if i use a high port, like 5700
vnc using it's standard ports
What I can't get going is an FTP server.
I have tried several servers including FTP serv-u and WS_FTP's server.
I have done port forwarding etc.
Charter clearly locks the use of port's 20&21.

I am now thinking that maybe I should just use some alternative program, not FTP, but it would be nice if I did not have to install a client program which was the beauty of FTP.

Any suggestions for accessing files (VNC does not) remotely on a non-standard port?

Thanks"


POSSIBLE IDEAS/WORKAROUNDS:
--------------------------------------------------------------

1.) TFTP via a service maybe... it's an alternate that uses UDP instead of TCP to do the same as FTP does. Faster, less reliable: The trade-off here.

2.) BETTER FTP CLIENT USING ANOTHER FTP PORT: If that is not for you, try out SmartFTP... it is an EXCELLENT & massively full-featured FTP client & maybe, just maybe, it will "cut the mustard"...

3.) USING ANOTHER PORT FOR YOUR FTP SERVER: You can use ports other than 21 for FTP you know for your FTP server program...

That's an idea in & of itself!

(And, you can make the client logon to said port via GUI usually by telling it WHAT port to access on logon etc.)

4.) COMMANDLINE FTP USING ANOTHER PORT - Commandline character-mode console FTP can do that as well I think, but you have to send it a commandline of the entire string of servername, username, pwd, & port iirc...

Type FTP at a DOS Window first...

ftp> OPEN ftp.microsoft.com [2002] < user yourname password your password

I know that it varies by client on the commandline... for the native MS one ported from UNIX, I think you have to put it into [] brackets (because the UNIX ancestor the MS one is ported from works like that for port to open using the -p switch for the commandline iirc!)

Yes, it's cryptic & uses pipes/redirection to send in your username & pwd & I know you can actually script it as well this way!

(So this is a possibility on the port number to use as well. I am pretty sure you send it the port to use via that COLON port # as well, but DO double-check on ftp commandlines here.)

5.) PASV mode login & transfer? I know that can beat alot of restrictions that some FTP servers & such have!

(So that may be something you overlooked as well, though I mentioned it above, my posts get kind of long because I try to cover every little detail & edit them for the 2-3 times usually).

APK

Post #119700
Edit Quote Print Solution Plonk Delete
mthaler
Member


Posts: 89
Joined: 2000-08-24
Member No.: 4250
Icon 2003-02-07 02:28:00

Just another followup:
I managed to do a work-around that I don't love, which is using the HTTP protocol on an alternate port, with security. It is a pain to administer, if I want to add other users (just a couple, but still).
I have continued to try to get the ftp to work.
I know it works fine from within my subnet, but from outside in the real world, no joy.
I have tried the PASV mode that does not work.
I have tried the command line mode, as with the PASV, I can log in, but the minute I try to get a directory, it hangs.
As I understand it, the port you assign to the FTP server (like 21) is the communication port, and the (port-1) (like 20) is the data port. It would appear that the data port is blocked no matter what I am doing.
Is it possible that Charter can detect any FTP data even on alternate ports?

To repeat, I am using ALTERNATE ports for FTP since 20-21 are blocked.
I have tried 210, 2100, 5702 just for grins. All work the same way, login is fine, but no directories. And, I always open two ports in my router, the main one, and the main one minus 1.

Post #120029
Edit Quote Print Solution Plonk Delete
adamvjackson
Senior Member


Posts: 2174
From: Asheville, NC
Joined: 2002-08-26
Member No.: 12643
Icon 2003-02-07 02:32:41

Possible, if they're sniffing for the ftp protocol... To be honest, all I've ever done on their network is set up an FTP on 20/21 and I was able to connect just fine within the subnet. I suspect that Charter blocks these ports as most home users do not need these or would be exploited by virui. Upgrading to a commercial account is probably your best bet.

If my method of reasoning is correct, about home users having open FTP ports being exploted by virui, trojans, etc. then it would stand to reason that someone who ordered a commercial account would be more aware of security issues than a home user.

Food for thought...

Post #120030
Edit Quote Print Solution Plonk Delete
adamvjackson
Senior Member


Posts: 2174
From: Asheville, NC
Joined: 2002-08-26
Member No.: 12643
Icon 2003-02-07 02:39:34

A quick search at groups.google.com turned up many Charter customers having problems with FTP/HTTP servers... As I suspected, these ports have been blocked for non-commercial accounts.

Post #120031
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-02-07 08:16:32

"with the PASV, I can log in, but the minute I try to get a directory, it hangs.

As I understand it, the port you assign to the FTP server (like 21) is the communication port, and the (port-1) (like 20) is the data port. It would appear that the data port is blocked no matter what I am doing."


This is FTP'ing to yourself to test it, right?

Sounds like PASV is getting thru now, but I have a question to ask:

* Are you using NTFS there, & is there filesystem security in place on it, & if so, what users are assigned rights to your FTP folders??



(Try EVERYONE with FULL RIGHTS first... humor me, try this & then try that PASV mode transferral using whatever ports you wish again...)

APK

Post #120040
Edit Quote Print Solution Plonk Delete
mthaler
Member


Posts: 89
Joined: 2000-08-24
Member No.: 4250
Icon 2003-02-07 09:13:00

Alec,
I can connect and download to my heart's content, when I am doing it in the local subnet. The problem is when I try it from out in the "real world" of the rest of the internet.
From the Internet, PASV gets through to CONNECT, but not for downloading. I can't list a directory. And BTW, I am NOT using IIS's FTP, I am using a third party FTP program that worked fine when I did not have CHARTER.

Post #120043
Edit Quote Print Solution Plonk Delete
AlecStaar
Account Disabled


Posts: 51
From: A discrete point in the Space-Time continuum...
Joined: 2001-02-09
Member No.: 5224
Icon 2003-02-07 09:21:53

"Alec,
I can connect and download to my heart's content, when I am doing it in the local subnet. The problem is when I try it from out in the "real world" of the rest of the internet.
From the Internet, PASV gets through to CONNECT, but not for downloading. I can't list a directory. And BTW, I am NOT using IIS's FTP, I am using a third party FTP program that worked fine when I did not have CHARTER."


Whoosh... doesn't look good to me at this point!

Do you know any other folks in your area using CHARTER cable networks? If so, consult with them regarding it!



* Better yet still, I'd go right to the horse's mouth & ask them about it... I would at this point, what do you have to lose?

There is also the option of doing TFTP, iirc, it is like FTP but uses UDP ports, is faster but less reliable (like UDP is).

Do consider that... ALSO, is it possible (on an "off-chance") that your firewall is in the way? Do look into parameterizng it for allowing whatever ports you use for FTP inwards... if that fails as well, again, there is TFTP!

APK

P.S.=> Anyhow, I'd ask them eventually point-blank about it (your ISP/BSP) because beating your head against something you cannot win against is just not worth it... if they tell you it is a no-go & they are limiting that ability, you're possibly fighting a losing cause. If they tell you they are not, then it's worth fighting the 'good fight' as you are now... apk

Post #120044
Edit Quote Print Solution Plonk Delete
drivere350
Junior Member


Posts: 1
Joined: 2004-03-25
Member No.: 29017
Icon 2004-03-25 09:10:12

Go to http://dslwebserver.com/main/fr_index.html?/main/sbs-webserver-on-a-different-port-number-host-headers.html you can get around the block by setting up your DNS at zoneedit.com to forward to whatever port you want.

Post #137277
Edit Quote Print Solution Plonk Delete
silver-dagger
Member


Icon 2004-03-25 17:43:20

I have Charter in central Missouri and I have not had any problem with anything. I have ran a small personal http, ftp, mail, and even VNC.

Post #137285
Edit Quote Print Solution Plonk Delete
imconfused
Junior Member


Posts: 2
Joined: 2004-06-01
Member No.: 30330
Icon 2004-06-01 00:33:16

i have a problem with charter, and im not sure if this relates to ports. my problem started a couple months ago when i got a new computer. i got my new computer and set up my internet connection through a wireless router.. DLINK 624. I then discovered that I could not host games in Warcraft III. However, on my original computer, which was hardwired to the router, I was able to host games. Seeing that I could not host games on my new computer, I jumped to configure my router. It took a while, but with help from DLINK i got it sorted out. Then, a strange thing happened. I can join and host games for everyone that I have ever tried on battle.net, except my best friend. This really sucked, because we used to play a lot of games before I got my new computer. We have both been trying to reconfigure our routers, set static ips (we have tried everything) for about a month and half. I've called my router company, blizzard entertainment, and my ISP about 100 times. No one knows what to do. My friend and I have the same ISP, charter. However, charter said that the fact that we had the same ISP, in the same town, would not make a difference. People have told us to try 'pinging' each other's ips, but we get a 'request timed out.'
anyway, it's a strange situation because we can both join/host everyone else's AT games. neither of us can host/join each others AT games. it's really aggrivating because no one knows what to tell us.
charter says that they don't block internal traffic, they don't block port 6112, so basically they say that the problem is not their fault. we know its not our routers, we know its not the actual game server, so we are almost positive it is charter. however, we have no idea how to fix it, and neither does charter.
does anyone have any suggestions?
thanks

Post #139371
Edit Quote Print Solution Plonk Delete
Spamn
Junior Member


Posts: 3
Joined: 2004-08-24
Member No.: 37937
Icon 2004-08-24 09:08:46

I have a similar problem. I'm on Charter in Missouri and they have a strict policy against running websites.

Well, I ran my IIS server and they shut my modem down. I have no idea how to get it back up. I know they sent some kind of signal to my modem (or somehow blocked the MAC address) because I hooked up another cable modem here and it worked. I have a Motorola Surfboard and ever since they shut me down for running my website, the powerlight just flashes on and off while all of the other lights stay constant. I've tried to restart the modem numerous times. No luck.

Any suggestions?

Thanks
Sam

**edit** I forgot to mention that this happened before and somehow it fixed itself overnight. This time it's been down for a long time.

Post #144232
Edit Quote Print Solution Plonk Delete
Alec§taar
Account Disabled


Posts: 207
From: A discrete point in the Space-Time Continuum...
Joined: 2001-04-17
Member No.: 5614
Icon 2004-08-24 12:15:36

Originally posted by Spamn:
"I have a similar problem. I'm on Charter in Missouri and they have a strict policy against running websites."


Most do, unless you pay them "business account" monthly fees, & those are QUITE alot more per-month.

Originally posted by Spamn:
"Well, I ran my IIS server and they shut my modem down."


Yup, they monitor monthly bandwidth DOWN, but in your case? MORE IMPORTANTLY, UP!

(They see you start pushing TONS of files & data outward, they start looking @ what you're doing & estimate your are running a site from a normal end-user account... same with filesharing programs too! This is HOW they 'bust' you on that!)

Originally posted by Spamn:
"I have no idea how to get it back up."


TFTP... that is how cablemodems (routers of a sort really) are configured. They did what is called "bouncing & bricking" your modems configuration via TFTP reconfiguring it to not work anymore!

Originally posted by Spamn:
"I know they sent some kind of signal to my modem (or somehow blocked the MAC address) because I hooked up another cable modem here and it worked."


Again: You got 'bricked' because of what I stated above. You'll have to call them to have them reconfig it again for valid use on their networks.

Originally posted by Spamn:
"I have a Motorola Surfboard and ever since they shut me down for running my website, the powerlight just flashes on and off while all of the other lights stay constant. I've tried to restart the modem numerous times. No luck.

Any suggestions?

Thanks
Sam

**edit** I forgot to mention that this happened before and somehow it fixed itself overnight. This time it's been down for a long time."


They're "onto you" now is all & will brick you everytime you start busting their 'accepted norm' of uploaded data on their logs. You can be sure that your ISP/BSP keeps logs of this stuff & logs "OutLiers" (folks that transmit a TON of data upwards/outwards from their rigs over their cablemodems, like a website &/or filesharing tool like Kazaa can generate).

Once you appear on those logs? They'll brick you everytime & this forces you to call them up to have them turn it on again & then you'll have to listen to them 'chew you out' & try to sell you a 'business account' (same as normal account, but alloted for more upward/outbound transmission use & costs ALOT more per-month!)



* Sorry to be the 'harbinger of bad news' but I worked for a HUGE ISP/BSP a good chunk of last year in their techsupport/networking issues areas & saw how ALL of this is done @ the Network Operations level for them!

APK

Post #144248
Edit Quote Print Solution Plonk Delete
adamvjackson
Senior Member


Posts: 2174
From: Asheville, NC
Joined: 2002-08-26
Member No.: 12643
Icon 2004-08-24 16:01:31

Yep, Alec is right-on-the-money with this one. I visited the local Charter NOC sometime last year, and I can ASSURE you that all upstream traffic is monitored, and all P2P traffic IS being logged.

Be careful with your TOS/AUP!

Post #144282
Edit Quote Print Solution Plonk Delete
jmmijo
Senior Member


Posts: 1295
Joined: 2002-05-29
Member No.: 9759
Icon 2004-08-24 16:23:23

So I take it this is not something that is exclusive to Charter, I would Imagine that Comcast does something similar ?!?

Interesting in that I initially was on ATTBI in my area until they sold out to Comcast. I wonder if ATTBI just never cared about this or what ?!?

Post #144288
Edit Quote Print Solution Plonk Delete
Spamn
Junior Member


Posts: 3
Joined: 2004-08-24
Member No.: 37937
Icon 2004-08-24 17:31:12

Like it says in my **edit**, this happened before and it came back on overnight. How did it fix itself? Maybe they were just warning me or something..

Post #144302
Edit Quote Print Solution Plonk Delete

2 pages 1 2

Reply New Poll

Forum overview » Networking » Charter.net cable open ports

Legend
View   View profile
Solved   Mark this post as solution (topic starter only)
Quote   Reply with quote to post
Edit   Edit post
Delete   Delete post (admin only)

Moderator: Open / Close / Bump / Delete / Move / Merge


All products mentioned are registered trademarks or trademarks of their respective owners.
© 1998-2009 Esselbach Internet Solutions - All Rights Reserved. Terms and privacy policy
Website powered by Esselbach Storyteller CMS System