DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

2820 Firewall : Testing to block port 80 (Web test on Win7)

  • zgap111
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
28 Mar 2010 17:01 #7 by zgap111
I'm just going through the port numbers now.

If I block: TCP/UDP ports:

1 to 65535 (it then anges to "all") = web blocked
80 to 65535 = web blocked
80 to 8000 = web accessable
80 to 20000 = web accessable
80 to 40000 = web accessable
80 to 60000 = web blocked
80 to 50000 = web accessable
80 to 55000 = web blocked
80 to 53000 = web blocked
80 to 51000 = web blocked
80 to 50500 = web accessable
80 to 50800 = web accessable
80 to 50900 = web accessable
80 to 50950 = web accessable = slow at resolving addresses at first, but now back to instanteneous
80 to 51000 = web accessable (note: 51000 WAS blocked, see above) ???
80 to 52000 = web blocked
80 to 51500 = web blocked
80 to 51250 = web accessable
80 to 51375 = web accessable
80 to 51500 = web accessable (note: 51500 WAS blocked )??

I think I'll stop here, as the pattern is that:
I'll try 52000 (which WAS blocked) and find later that 52000 will be accessable.

This is really odd. Is this a Windows 7 thing?

Note: My form of testing web sites is randomly pressing on links on news sites, random presses on googles various searches.

I'm using both Firefox 3.6 and IE8 to try the sites.
Any help would be appreciated.

Please Log in or Create an account to join the conversation.

  • zgap111
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
28 Mar 2010 17:04 #8 by zgap111
IPv4 settings in Windows 7 are:
Obtain an IP address automatically
Obtain DNS server address automatically

I can set DNS to 192.168.88.1 for the router.

Will try it now.

Please Log in or Create an account to join the conversation.

More
28 Mar 2010 17:06 #9 by njh

zgap111 wrote: Obtain DNS server address automatically


What about in the router?

2900Gi/v2.5.6; 2900/v2.5.6

Please Log in or Create an account to join the conversation.

  • zgap111
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
28 Mar 2010 17:07 #10 by zgap111
Didn't work.

ipconfig /all is:
========
Default Gateway . . . . . . . . . : 192.168.88.1
DHCP Server . . . . . . . . . . . : 192.168.88.1
DHCPv6 IAID . . . . . . . . . . . : 234890380
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-72-AB-97-00-24-8C-94-BD-5D
DNS Servers . . . . . . . . . . . : 192.168.88.1
NetBIOS over Tcpip. . . . . . . . : Enabled
=====

And I'm sending this reply with the router is currently set to block 80 to 51000

Any more suggestions?

Please Log in or Create an account to join the conversation.

  • zgap111
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
28 Mar 2010 17:09 #11 by zgap111
The router:
Under LAN > General Setup
The DNS Server IP Address:
unticked = Force DNS manual setting
Primary IP address: 62.6.40.162
Secondary IP Address: 194.74.65.69

Should I change those to 192.168.88.1 ?

Please Log in or Create an account to join the conversation.

  • zgap111
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
28 Mar 2010 17:19 #12 by zgap111
Strange but on the main systems status screen for the router:
LAN Status:
Primary DNS 87.194.255.155
Secondary DNS: 194.74.65.69

The "Primary" Is different to the "LAN > General Setup" figure.

Please Log in or Create an account to join the conversation.

Moderators: Sami