• Network access is limited when connecting from a "wrong port". It's unknown what is considered a "port" in this case and how a port is a "wrong" one.

  • PPPoE connects fine

  • UDP port 53 is allowed with 1mbps bandwidth limit to any IP

  • HTTP requests are forwarded to "hatali_port" page

    # curl -v google.com
    *   Trying 142.251.37.14:80...
    * TCP_NODELAY set
    * Connected to google.com (142.251.37.14) port 80 (#0)
    > GET / HTTP/1.1
    > Host: google.com
    > User-Agent: curl/7.68.0
    > Accept: */*
    >
    * Mark bundle as not supporting multiuse
    < HTTP/1.1 200 OK
    < Content-Length: 230
    < Connection: close
    < Cache-Control: no-cache
    < Expires: -1
    < Content-Type: text/html
    <
    <html>
    <head>
    <meta http-equiv="Refresh" content="1; URL=http://bilgi.turktelekom.com.tr/hatali_port">
    <meta http-equiv="pragma" content="no-cache">
    </head>
    <body>
    Please wait while you are redirected ...
    </body>
    </html>
    * Closing connection 0
    
  • A TurkTelekom IP 212.156.201.142 replies back with ICMP code 13 (communication administratively filtered) for any other requests

  • Only traffic with this TT IP 93.155.105.95 as destination will pass (IP of bilgi.turktelekom.com.tr)

    # curl -vik 93.155.105.95/hatali_port/
    *   Trying 93.155.105.95:80...
    * TCP_NODELAY set
    * Connected to 93.155.105.95 (93.155.105.95) port 80 (#0)
    > GET /hatali_port/ HTTP/1.1
    > Host: 93.155.105.95
    > User-Agent: curl/7.68.0
    > Accept: */*
    >
    * Mark bundle as not supporting multiuse
    < HTTP/1.1 302 Found
    HTTP/1.1 302 Found
    < Cache-Control: private
    Cache-Control: private
    < Content-Type: text/html; charset=utf-8
    Content-Type: text/html; charset=utf-8
    < Location: /hatali_port/Info.aspx
    Location: /hatali_port/Info.aspx
    < Server: Microsoft-IIS/10.0
    Server: Microsoft-IIS/10.0
    < X-AspNet-Version: 4.0.30319
    X-AspNet-Version: 4.0.30319
    < Set-Cookie: ASP.NET_SessionId=finlprbriumpv2eggpi43i0z; path=/; HttpOnly; SameSite=Lax
    Set-Cookie: ASP.NET_SessionId=finlprbriumpv2eggpi43i0z; path=/; HttpOnly; SameSite=Lax
    < Set-Cookie: TTNETInfo=dXp45mQCA5ylTaVZQBw+GRCKXaGSvb7msIcGbgZb3VO5qz2f+y7EQ2RZkHjJxsTxiNu4QHiFp5e476GMScnp0xMs4HAzQKfG6uedNcM+uevLO1WJBegm7ad9YBS71gDLKX7s2OwbkNCctHMdp8EHQYAG2xQYtEiF077Jw2gM4NUKt+2pcCafbK44Znnw3FikhvxPEOpwCAtcVxavbfReBrDb/hxgAEt4XuhNoPAGoOCZiF54vANH/dSJ5fYtdLKZMBGLKmIwHYWLChUX/sZCAh3oWWv3o+fm5PKn028F3oKHwoB/tM085b/hMm36C+3nvFbKRVxCqz08/9hrnbAGsvne80i3RNf6gDVhuXdSWjdxvQnB7tdHRMWt4UWcNNACPXvE7UvIa6C5lEqeYfX17ALyIysdgODJ5vF+dDDgBtQFcgINfSmsPcHJ6x909WEjG2m+ie1rCeRJmYo2B9Ds++rIgD9smUSz9Tkq1LWDuIc=; expires=Tue, 31-Aug-2021 05:48:49 GMT; path=/
    Set-Cookie: TTNETInfo=dXp45mQCA5ylTaVZQBw+GRCKXaGSvb7msIcGbgZb3VO5qz2f+y7EQ2RZkHjJxsTxiNu4QHiFp5e476GMScnp0xMs4HAzQKfG6uedNcM+uevLO1WJBegm7ad9YBS71gDLKX7s2OwbkNCctHMdp8EHQYAG2xQYtEiF077Jw2gM4NUKt+2pcCafbK44Znnw3FikhvxPEOpwCAtcVxavbfReBrDb/hxgAEt4XuhNoPAGoOCZiF54vANH/dSJ5fYtdLKZMBGLKmIwHYWLChUX/sZCAh3oWWv3o+fm5PKn028F3oKHwoB/tM085b/hMm36C+3nvFbKRVxCqz08/9hrnbAGsvne80i3RNf6gDVhuXdSWjdxvQnB7tdHRMWt4UWcNNACPXvE7UvIa6C5lEqeYfX17ALyIysdgODJ5vF+dDDgBtQFcgINfSmsPcHJ6x909WEjG2m+ie1rCeRJmYo2B9Ds++rIgD9smUSz9Tkq1LWDuIc=; expires=Tue, 31-Aug-2021 05:48:49 GMT; path=/
    < Accept-Bytes: none
    Accept-Bytes: none
    < Date: Mon, 30 Aug 2021 05:48:48 GMT
    Date: Mon, 30 Aug 2021 05:48:48 GMT
    < Content-Length: 8723
    Content-Length: 8723
    < Set-Cookie: NSC_JOuavb2zbaa4ip1b2rpwzvekawzi1c0=ffffffff097c124145525d5f4f58455e445a4a423660;expires=Mon, 30-Aug-2021 05:50:49 GMT;path=/;httponly
    Set-Cookie: NSC_JOuavb2zbaa4ip1b2rpwzvekawzi1c0=ffffffff097c124145525d5f4f58455e445a4a423660;expires=Mon, 30-Aug-2021 05:50:49 GMT;path=/;httponly
    
    <
    <html><head><title>Object moved</title></head><body>
    <h2>Object moved to <a href="/hatali_port/Info.aspx">here</a>.</h2>
    </body></html>
    
    <!DOCTYPE html>
    <html xmlns="<http://www.w3.org/1999/xhtml>">
    <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=1000px" /><title>
            Türk Telekom
    
    ---
    
        <div class="mainDiv">
            <div class="content">
                <div id="ContentPlaceHolder1_divTitle">
                    <h1>Port Hatası Bilgilendirme</h1>
                </div>
    
                <br />
                <div id="ContentPlaceHolder1_divMessage">
                    <p>
                        Bağlantınız teknik bazı nedenlerden dolayı sağlanamamaktadır.<br />
                        Hattınıza ait internet bağlantı sorununun tespit edilerek arıza kaydı açılabilmesi için,<br />
                        aşağıdaki alana bir irtibat numarası yazarak <strong>“Onaylıyorum”</strong> butonuna tıklayınız.
                    </p>
                    <p>
                        Arızanızla ilgili sorun giderildiğinde tarafınıza bilgi verilebilmesi için mutlaka bir<br />
                        irtibat numarası yazmanızı rica ederiz.&nbsp;
                    </p>
                    <br />
                </div>
    
    ---
    
            <div id="ContentPlaceHolder1_divWarningModem" class="content">
                <p>
                    Hattınıza ait kontrollerin yapılabilmesi için sorun giderilene kadar lütfen modeminizi açık bırakınız ve<br />
                    ayarlarınızda herhangi bir değişiklik yapmayınız.
                </p>
            </div>
            <div class="divider"></div>
            <div class="confirmation">
            </div>
        </div>
    
            </div>
        </form>
    </body>
    </html>
    * Connection #0 to host 93.155.105.95 left intact
    
    # curl -v 1.1.1.1/hatali_port/ --header "Host: bilgi.turktelekom.com.tr"
    *   Trying 1.1.1.1:80...
    * TCP_NODELAY set
    * Connected to 1.1.1.1 (1.1.1.1) port 80 (#0)
    > GET /hatali_port/ HTTP/1.1
    > Host: bilgi.turktelekom.com.tr
    > User-Agent: curl/7.68.0
    > Accept: */*
    >
    * Mark bundle as not supporting multiuse
    < HTTP/1.1 200 OK
    < Content-Length: 230
    < Connection: close
    < Cache-Control: no-cache
    < Expires: -1
    < Content-Type: text/html
    <
    <html>
    <head>
    <meta http-equiv="Refresh" content="1; URL=http://bilgi.turktelekom.com.tr/hatali_port">
    <meta http-equiv="pragma" content="no-cache">
    </head>
    <body>
    Please wait while you are redirected ...
    </body>
    </html>
    * Closing connection 0