Like this show everyone my site

  • DNS Benchmark v2 Release 5 with Consultant License
    Guest:
    If you own any earlier release of our DNS Benchmark you may immediately download its release #5 replacement. Running an earlier release will detect the new release and help you upgrade.

    Although this release is cosmetic, appearance matters and affects ease of use. The biggest change, as seen in the image above, is that the DNS Benchmark now has a traditional Windows application menu to more fully expose its many features. This release is also "Consultant License Aware" and GRC will now issue a Consultant version when owners have previously purchased four "Personal Use" licenses. If you have previously purchased four DNSB licenses, or if you wish to upgrade your "Personal Use" license to Consultant, GRC's purchase process will direct you through that process.
    /Steve.
  • Be sure to checkout “Tips & Tricks”
    Dear Guest Visitor → Once you register and log-in please checkout the “Tips & Tricks” page for some very handy tips!

    /Steve.
  • BootAble – FreeDOS boot testing freeware

    To obtain direct, low-level access to a system's mass storage drives, SpinRite runs under a GRC-customized version of FreeDOS which has been modified to add compatibility with all file systems. In order to run SpinRite it must first be possible to boot FreeDOS.

    GRC's “BootAble” freeware allows anyone to easily create BIOS-bootable media in order to workout and confirm the details of getting a machine to boot FreeDOS through a BIOS. Once the means of doing that has been determined, the media created by SpinRite can be booted and run in the same way.

    The participants here, who have taken the time to share their knowledge and experience, their successes and some frustrations with booting their computers into FreeDOS, have created a valuable knowledgebase which will benefit everyone who follows.

    You may click on the image to the right to obtain your own copy of BootAble. Then use the knowledge and experience documented here to boot your computer(s) into FreeDOS. And please do not hesitate to ask questions – nowhere else can better answers be found.

    (You may permanently close this reminder with the 'X' in the upper right.)

Thanks.

Quick Port Scan 1-999 at
https://bridgemode.base44.app/QuickPortScan
... brought this message:

"CGNAT TCP Proxy Limitation Detected
Your ISP CGNAT TCP proxy is a limitation. With over 100 closed
ports detected, your network may be behind carrier-grade NAT
which does not randomize TCP source ports."

Hmm ... maybe it's time for me to try different modems/routers and
see if I can move that message along.

Currently using:

Netgear C3000-100NAS V2.02.21 DOCSIS 3.0​

- - - - -

Site feedback - for me, some buttons disappear or otherwise block
their word contents - contrast may need fixing.

ADA suggests:
  • high color contrast, at least 4.5:1 for color pairs,
    foreground and background, see tools such as:
    https://www.levelaccess.com/color-contrast-checker-new/
  • provide text alternatives (alt text) for images,
  • enable text resizing up to 200%,
  • use semantic HTML/ARIA labels for screen readers,
  • and offer keyboard-only navigation
Thanks again.
 
Thanks for testing I as for why your see “CGNAT TCP Proxy Limitation Detected” This is likely your ISP I know o2 CGNAT here is the UK does the same but EE CGNAT does not.


Or if you have a outbound firewall limiting ports that too would show message
 
Does not work for IPv6 addresses.
1772623764396.png
 
Ok added IPv6 for that

been mostly fixes bug for Network Layout Builder as its really cool what I'm doing with it to have a Virtual VLAN/routing packet play and ARP I think I have nailed down the routeing side of things now need to do Virtual Server.
 
I likely need to add examples but here is a example to load for Network Layout Builder of a setup to get a idea of the setup needed if you test from server 1 for send packet like IPv4 ICMP to 1.1.1.1 it should work
 

Attachments

  • example.zip
    1.6 KB · Views: 46
Arr you mean the outgoing ports test yes let me explain some ISP CGNAT are good and some are bad in the way there do CGNAT you see your end you do randomize TCP source ports but the CGNAT may not and locks you to a fixed source ports to a given destination this is bad vs another CGNAT that either tries to keep your randomize TCP source ports when going out or randomize TCP source ports more.

Here is a Wireshark of a bad CGNAT o2

o2.jpg


and here is a Wireshark of a good CGNAT EE
ee.jpg



Due to the way ports are mapped this makes a block effect the only thing you can do is select scan mode long timeout due to non-random source ports

The site is not showing them in full screen so here is a zip...well its not letting me do that now🤪
 
Last edited:
Now have a working model of My CGNAT with inbound traffic support and are WAN IP to are device
Click the Load example
then import to
To do send packet to given WAN IP and enable and add firewall rules to test it key thing to note in this example on port 2 of ISP CGNAT Firewall in the DHCP server tab shows the ports on Reverse Path for this to work

Of course I can never fix supporting like two port 80 on the same IP but the whole point is to extent the life of IPv4 and keeping inbound traffic as much as possible.