topic Re: If you use Content Screening please read this. in Archive

If you use Content Screening please read this.

DaveA — Thu, 16 Aug 2012 07:49:01 GMT

Hi all,

As part of the question about Content Screening I need to find out the make and model of the router you're using it on.

If you could also include the firmware version, which you can find on the router summary page, then that would be great.

Thanks in advance.

Dave

Re: If you use Content Screening please read this.

latticelodge — Thu, 16 Aug 2012 13:50:55 GMT

Mod note: The first three lines will do. 🙂

System Information

Model:	BT2700HGV
Hardware Version:	2701-100589-005
Firmware Version:	6.3.9.63-plus.tm

Re: If you use Content Screening please read this.

DaveA — Thu, 16 Aug 2012 13:52:18 GMT

Hi,

Just in case there's any sensitive info, just post the first three lines from the router summary, like I've changed the above post to, as it's all I need.

Dave.

Re: If you use Content Screening please read this.

iptables101 — Thu, 16 Aug 2012 15:27:43 GMT

Hi. I'm not sure but is there an updated version than that?

Re: If you use Content Screening please read this.

bombinho — Thu, 16 Aug 2012 23:56:17 GMT

http://business.forums.bt.com/t5/Broadband-and-internet/Content-Screening-problems/td-p/43444/page/2

should be the link to one of my previous posts containing the required information.

I am not sure if this question makes me happy as it tastes a bit of targeted elimination

of the few remaining unbroken. But maybe I am wrong and it is just to make sure that those

still using it can keep using it without future problems similar to the experienced ones.

Re: If you use Content Screening please read this.

DaveA — Fri, 17 Aug 2012 14:12:19 GMT

Hi,

My lord you're a cynical one.

To be honest we think we know which routers should have it, but we just want to check.

Dave

Re: If you use Content Screening please read this.

whiller123 — Sat, 18 Aug 2012 08:01:17 GMT

@DaveA

Hi Mr A

I have a mixture of both listed below 7 in total all with the same firmware (which I believe to be the latest but stand to be corrected) all working!

I have a pile of unused ones in my office which I am sure will have older firmware I will try an older version on Monday & let you know.

Regards

Rob

Model:	BT2700HGV
Hardware Version:	2701-100589-005
Firmware Version:	6.3.9.63-plus.tm

Model:	2701HGV-C
Hardware Version:	2701-100630-008
Firmware Version:	6.3.9.63-plus.tm

Re: If you use Content Screening please read this.

whiller123 — Sat, 18 Aug 2012 08:37:07 GMT

@DaveA

Found this new one in the car No content screening in the menu.

It did however as it was pre configured with username & password connect to Bt broadband down this TalkTalk line with TalkTalk broadband on it????

Rob

Model:	2701HGV-C
Hardware Version:	2701-100630-008
Firmware Version:	6.3.9.41-plus.tm

Re: If you use Content Screening please read this.

bombinho — Sat, 18 Aug 2012 12:00:53 GMT

Sorry. Just as you already mentioned you do the updates via external access anyway.

So I could only see one reason for the question. That the routers in question do not

respond "perfectly". So there is manual "correction" needed.

Why would one want to correct something working then? You see where I am coming from?

But I do get updates to my fimware and there appears to be frequent external access

to the firmware anyway. I am just not 100% sure if that is fully authorised or not?

And despite the access there is no notification in the firmware version.

By the way the content screening system worked unusual quick after being repaired.

But it slowly drifts back to normal.

Re: If you use Content Screening please read this.

whiller123 — Sun, 19 Aug 2012 06:59:08 GMT

@bombinho

Hi again

All my content screening is working perfectly as far as I am aware unless it has failed again overnight, are you having difficulties again with yours?

The firmware is updated overnight by Bt I think & all the hub's I have out on site are running

6.3.9.63-plus.tm Firmware Version

One of my clients has stuck with the free open DNS screening he likes the fact that we can customise the message on the blocked screen.

Rob

Re: If you use Content Screening please read this.

bombinho — Sun, 19 Aug 2012 17:19:03 GMT

@whiller123:

nope everything is working fine at the moment. I just wondered about the fact that obviously firmware changes are getting carried out without reflections in the firmware version.

For the first days the content screening could not even be felt. Normally its around one to two seconds for a not recently used server. Not so during that time. Almost instant response. But now everything goes back to normal.

Re: If you use Content Screening please read this.

whiller123 — Sun, 19 Aug 2012 20:27:40 GMT

@bombinho

"Happy days"

Rob

Re: If you use Content Screening please read this.

whiller123 — Thu, 23 Aug 2012 14:52:43 GMT

@DaveA

Dave some time ago you said "the question has been asked" obviously RE: content screening.

Has the question been answered yet?

There are a few of us wanting to know

Rob

Re: If you use Content Screening please read this.

whiller123 — Thu, 23 Aug 2012 15:07:22 GMT

@bombinho

You obviously use content screening just like I do, have you noticed an increase in port scans & attacks since you are using the screening again?

I have switched a customer back from Open DNS to Bt yesterday and within half an hour port scans & attacks.

Even when I refresh the IP address the same attackers are back within minutes. I switched back to open DNS overnight and the attacks stopped, well apart from the usual random attempts. I have spent this morning switching back to Bt & guess what? the same attackers from China are back within the hour. I refresh the IP and within minutes they are back again, this is to much of a coincidence. I will start switching the rest of my clients back tomorrow to attempt to prove the point.

If you get a minute could you look at your log & let me know if you have the same issue.

Rob

Re: If you use Content Screening please read this.

bombinho — Fri, 24 Aug 2012 08:48:20 GMT

@whiller123: No can not confirm that from here. Nothing in the attack alerts since 3 days. I had to reboot the router as it had become unresponsive. Not a single entry since then. Port scans are very rare anyway nowadays. Usually syn floods or other subtle forms of communication attempts. An incredible amount of communication attempts targets the NAS directly and goes through the hub like a hot knife through butter. Just the NAS is not connected. That follows me around at the moment.

Re: If you use Content Screening please read this.

Engineer — Fri, 24 Aug 2012 10:17:50 GMT

whiller123

I am having a lot of pokes at my open ports too 9090,5900,1723

Even when I re-boot the Hub they seem to find me again & I do not have a static IP

Always seems to be from the same Chinese & US IP addresses this one is the most persistent 50.166.6.70

I will turn off the content screening re-boot & report back

Re: If you use Content Screening please read this.

Engineer — Fri, 24 Aug 2012 16:17:57 GMT

whiller123

Hi Rob

Well i'll be damned, well spotted, you are right I have played with this all afternoon & yes you are spot on.

I have a small network if I put the screening back on but do not use a device nothing, minutes after a DNS request is processed. it kicks off again I believe this content screening is compromised.

Not sure what to do now back to open DNS I am thinking.

Thanks for that

Everyone else beware

Re: If you use Content Screening please read this.

whiller123 — Fri, 24 Aug 2012 18:45:50 GMT

@engineer

Hi yes I had suspected this before but was not sure, I noticed that the "poke's" as you put it at my open ports all but stopped on 1st August.

Looking at the ports you have listed in your post you can change the VNC & AversMedia port range to something less obvious

When you connect with VNC it is just the IP address or domain then ::port number IE: you.dyndns.org::5908

with Avers it is in the remote software. don't think you can change your PPTP but passwords need to be the best they can be

Don't mean to teach you to suck eggs but hope this helps

Rob

Re: If you use Content Screening please read this.

Engineer — Sat, 25 Aug 2012 07:53:22 GMT

Whiller123

I understood the VNC & Avers comments I guess the other was referring to my Windows VPN

I have decided to leave the ports as standard & as my OpenDNS is still active I have switched back to that.

I have never had issue with OpenDNS & I am not convinced that the BT screening is fully sorted.

Thanks for your suggestions though

Re: If you use Content Screening please read this.

Engineer — Sat, 25 Aug 2012 12:45:04 GMT

This version now has content screening

Model:	2701HGV-C
Hardware Version:	2701-100630-008
Firmware Version:	6.3.9.41-plus.tm