8

From carrying out some brief research, it appears that as is the case today, when using Dial-Up to access the Internet customers were often allocated a dynamic IP address by their ISP. Typically, when connecting via a Broadband connection today via a router, some protection is offered from externally-facing attacks; the router only allows traffic to reach internally-connected clients if a rule has explicitly been defined to allow packets to be forwarded to a specific internal IP via a port number. Was this the case when using Dial-Up, or in theory was a machine accessible to anyone - either unless a user had installed and configured a software-based firewall on their computer, or the ISP implemented some kind of NAT?

  • 7
    It's not directly a matter of dialup or otherwise, it's whether there's a NAT layer in the way. The typical home router implements NAT as a way of having multiple devices share on ISP-assigned IP address, and a beneficial side-effect is that incoming TCP connections aren't forwarded unless forwarding has been explicitly set up. In the dial-up era, routers were not common, – another-dave Apr 13 at 17:46
  • 4
    From my experience here (Brazil), they were directly acessible by IP address. NAT didn't come into use until people had multiple devices at home. – Renan Apr 13 at 17:47
  • Semi-related: fadden.com/gaming/natgames.html – fadden Apr 13 at 18:12
  • Most private internet customers had a modem in their computer used for connecting, and no other internet capable devices, so the single IP-number assigned was enough for most users. Unless they paid premium they got a private network IP-address and therefore the ISP had to do the NAT-layering. – Thorbjørn Ravn Andersen May 4 at 15:40
8

In the UK my dial-up connection (from 1996) was accessible to anyone whilst connected. I didn't use a firewall on my MS-DOS computer. However, due to paying per-minute phone charges to dial in (in addition to a fixed monthly charge from my ISP), I only used the connection in batch mode for email and Usenet news (no Web) so I wasn't online for very long. (I would dial in and my Internet software would automatically transfer any email or news then logoff. I would read it offline and any replies would be sent on the next login.)

When I changed to a broadband connection (in 2006) with a cable modem and a MS-Windows PC I used a firewall (ZoneAlarm) which did detect external attacks. I added a router, to get wifi. The combination of NAT and an internal firewall in the router meant that ZoneAlarm no longer saw any attacks.

| improve this answer | |
  • I had a lot of experience over many years with ZoneAlarm. It was popular in the day, free, and very effective. Easy to use too. Checking my database, I see the earliest install of it I was using is dated February 2005, and I used it until I got a Windows 7 compatible broadband router in 2011. – Ed999 May 6 at 18:55
9

In the USA, most ISPs did NOT use NAT with dialup. Inbound port numbers were generally unblocked, but 25 (SMTP) was often blocked as a way to prevent spam.

| improve this answer | |
  • 2
    "Not always online" may also have provided a measure of protection, especially when background-noise port scans were less frequent. – another-dave Apr 13 at 17:48
  • 8
    In the early days it was important for a dialup ISP to avoid NAT because that would prevent FTP from working. This was before PASV mode and FTP proxies became widely used, so for FTP to work your computer had to be directly accessible via its IP address. – Ken Gober Apr 14 at 14:32
5

When connecting to the Internet via Dial-Up, were computers directly accessible via their allocated IP address?

Sometimes.

For example, my first internet connection was via a small ISP that used static address allocation from public address space.

(This was mid-1990s; at that time "you can't attack a service that isn't running" seemed to be sufficient)

| improve this answer | |
  • "(This was mid-1990s; at that time "you can't attack a service that isn't running" seemed to be sufficient)" - insecure.org/sploits/ping-o-death.html is a vulnerability from 96 that is exploitable on most OSs of the era with no extra servives running... – occipita Apr 24 at 8:11
  • 1
    "seemed to be" != "was" – another-dave May 1 at 19:53
2

At least some dial-up connections were directly connected to the Internet. Back in the late '90s I would often SSH in to my modem-connected home computer. Given that the addresses were dynamically assigned I'm not sure how I knew the IP to connect to. I suspect I either noted the address before leaving home or had a cron job attempt a connection to my work computer hourly or somesuch; checking its logs would show my home IP. I don't recall any port blocking going on but NETBIOS (ports 137-9) probably were blocked, especially in later years.

| improve this answer | |
1

This is one of those "it depends" answers. Source, I used to work as a network engineer, focusing primarily on "the internal backbone" and "dialup termination" at an ISP.

We would, by default, provide a publicly routable IP based on the POP you dialled into (assigned by the chassis your call terminated in).

We also had "single statically allocated IP" or "small statically allocated netblock" as an up-sell service (assigned by RADIUS as you authenticated).

Other ISPs would allocate a non-public IP, relying on proxies and NAT to provide internet connectivity.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.