From: Phillip Jones on
Mike Lane wrote:
> Jeffrey Goldberg wrote on Jun 21, 2010:
>
>> On 10-06-20 8:54 PM, Phillip Jones wrote:
>>> Mike Lane wrote:
>>
>>>> I don't have a home network or a router. My computer simply
>>>> connects directly via an ethernet cable to a cable modem which
>>>> plugs into my local cable company's socket.
>>
>>> Ugh! That a no-no that about the most insecure way to have an internet
>>> connection over cable or DSL. You always use a router in between. This
>>> adds layer of protection.
>>
>> Phillip, I would have concurred and would have given Mike instructions
>> on addressing had not the traceroute that he provided let me know he is
>> behind some router doing NAT.
>>
>>> You not sure your cable modem doesn't a Router built in
>>
>> His cable modem probably does have a router built in. I was a bit
>> alarmed when I first saw his message, but since I was asking for a
>> traceroute anyway, I figured that I would learn the actual situation
>> before alarming Mike.
>>
>> The first hop in the traceroute was
>>
>> 1 * 10.133.140.1 (10.133.140.1)
>>
>> Most likely that is the IP of his modem/router. It is possible that
>> that is on the other end of the line, which means that in the worst
>> case, Mike is exposed to all other Virgin Media customers using that
>> same router. That wouldn't be good, but it is certainly much better
>> than having his machine connected directly to the public Internet.
>>
>> Mike, would you mind taking a look at your cable modem and telling us
>> what the make and model is? Then we will be in a better position to advise.
>>
>> Also, the only machine in your house is your Mac, then go to System
>> Preferences> Security> Firewall and check the box to block all
>> incoming connections. Then go to Sharing and turn everything off.
>>
>> Depending on your answer to the make and model of your cable modem, I
>> and others here will advise you to purchase a very simple router. I
>> don't know what they cost in England, so I'll leave it to others here to
>> make specific recommendations, but if you don't have any kind of
>> internal network or wireless, the absolute simplest and cheapest thing
>> will do.
>>
>
> My cable modem is one supplied by the cable company and is their own model -
> pictured here:
> http://www.virginmedia.com/help/broadband/troubleshooting/cant-connect-lights-
> 256.php
>
> It's made for Virgin Media them by Ambit, I believe, and I think is known as
> a model 255 or 256. That's not much help I'm afraid.
>
>
>

I went to the Mac Troubleshooting section of the website and run across
the following: (notice what I have highlighted in the screenshot)

http://screencast.com/t/NzQwNzIyYjUt

It does not have a Router Built in.


--
Phillip M. Jones, C.E.T. "If it's Fixed, Don't Break it"
http://www.phillipmjones.net mailto:pjones1(a)kimbanet.com
From: Jeffrey Goldberg on
On 10-06-21 4:23 AM, Danny T wrote:
> Jeffrey Goldberg<nobody(a)goldmark.org> wrote:

>> First of all can you tell me who your ISP is?
>
> Pipex.

Thanks.

> I live in south Dorset.

Well, so much for my Northern theory!

> Good luck with fixing the problem.

Thank you. I wish I understood what was going on.

Cheers,

-j


--
Jeffrey Goldberg http://goldmark.org/jeff/
I rarely read HTML or poorly quoting posts
Reply-To address is valid
From: Jeffrey Goldberg on
On 10-06-21 3:08 PM, Phillip Jones wrote:

> I went to the Mac Troubleshooting section of the website and run across
> the following: (notice what I have highlighted in the screenshot)
>
> http://screencast.com/t/NzQwNzIyYjUt
>
> It does not have a Router Built in.

Thanks for checking into that. I strongly advise you to turn on your
firewall in OS X to "Block all incoming connections". You can do this
in System Preferences > Security > Firewall and clicking on the
"Advanced" button. You will see a check box for what I am recommending.

Do that straight away. Before you even finish reading this message.

Once that is done, you should buy a simple router. You don't need Wi-Fi
(unless you plan on getting other machines including an iPhone or the
like), and you don't need Gigabit switching. Basically you need the
simplest, cheapest router available.

They all do something called Network Address Translation (NAT) and part
of that process really seals of your local network (in this case your
local network is composed of your Mac and half of the router) from the
external network (which includes the other half of your router and the
big bad world).

Again, I don't wish to alarm you, as it did seem like Virgin Media were
providing NAT just a bit further out from your location. So it may only
be a small chunk of the big bad world that can probe and scan your Mac.
As an experiment, put your Mac to sleep and watch to see whether the
recv light on your cable modem flickers. Every time it does, that means
that something from the outside is trying to scan or probe whatever you
might connect to that cable modem.

I get several such probes of per second. It's a normal part of being
connected to the Internet. Fortunately, a router doing NAT takes care
of all of that for you, so those never get very far. (I have actually
configured my router to log those probes, and I send of a summery of
those logs to http://www.dshield.org/reports.html ) The overwhelming
majority of those automated probes are looking for Windows
vulnerabilities, but that doesn't mean that they all are.

I'll leave it to others who are more local to you to make
recommendations about where to get a router. Just don't let someone
sell you more than you need.

Cheers,

-j

--
Jeffrey Goldberg http://goldmark.org/jeff/
I rarely read HTML or poorly quoting posts
Reply-To address is valid
From: Mike Lane on
Jeffrey Goldberg wrote on Jun 22, 2010:

> On 10-06-21 3:08 PM, Phillip Jones wrote:
>
>> I went to the Mac Troubleshooting section of the website and run across
>> the following: (notice what I have highlighted in the screenshot)
>>
>> http://screencast.com/t/NzQwNzIyYjUt
>>
>> It does not have a Router Built in.
>
> Thanks for checking into that. I strongly advise you to turn on your
> firewall in OS X to "Block all incoming connections". You can do this
> in System Preferences > Security > Firewall and clicking on the
> "Advanced" button. You will see a check box for what I am recommending.
>
> Do that straight away. Before you even finish reading this message.
>
> Once that is done, you should buy a simple router. You don't need Wi-Fi
> (unless you plan on getting other machines including an iPhone or the
> like), and you don't need Gigabit switching. Basically you need the
> simplest, cheapest router available.
>
> They all do something called Network Address Translation (NAT) and part
> of that process really seals of your local network (in this case your
> local network is composed of your Mac and half of the router) from the
> external network (which includes the other half of your router and the
> big bad world).
>
> Again, I don't wish to alarm you, as it did seem like Virgin Media were
> providing NAT just a bit further out from your location. So it may only
> be a small chunk of the big bad world that can probe and scan your Mac.
> As an experiment, put your Mac to sleep and watch to see whether the
> recv light on your cable modem flickers. Every time it does, that means
> that something from the outside is trying to scan or probe whatever you
> might connect to that cable modem.
>
> I get several such probes of per second. It's a normal part of being
> connected to the Internet. Fortunately, a router doing NAT takes care
> of all of that for you, so those never get very far. (I have actually
> configured my router to log those probes, and I send of a summery of
> those logs to http://www.dshield.org/reports.html ) The overwhelming
> majority of those automated probes are looking for Windows
> vulnerabilities, but that doesn't mean that they all are.
>
> I'll leave it to others who are more local to you to make
> recommendations about where to get a router. Just don't let someone
> sell you more than you need.
>

Thanks very much for your trouble and concern on my behalf. I'll carry out
all your recommendations ASAP.

FWIW I haven't actually been able to catch the Recv light on my modem
flickering when my Mac is shut down or sleeping. That's not to say it doesn't
occasionally, of course.


--
Mike Lane
UK North Yorkshire
email: mike_lane at mac dot com

From: zoara on
Maxwell <max(a)thisisnotmyrealemail.com> wrote:
> Mike Lane wrote:
>
>> For the last few days I haven't been able to get to Agile Web
> > Solutions'
>> website http://agilewebsolutions.com/
>>
>> Is it just me? I'm somewhat anxious since they produce 1Password - an
> >
>> application I rather rely on.
>
> If I were more cynical, I'd suspect you were phishing.

If you were more accurate, you'd suspect he were spamming, surely? Or
have I missed a clever way this could be a phishing attack?

-z-

--
email: nettid1 at fastmail dot fm