Slashdot Mirror


Panama Decrees Block To Kill VoIP Service

An anonymous reader writes "In an apparent attempt to stem telephone company revenue losses due to Internet telephony, the government of Panama has decreed that 46 UDP ports be blocked by all Internet service providers. The ports include ones that are commonly used for voice over IP as well as some that are used for other purposes, apparently with the idea that these, too, could be used to circumvent the POTS (plain old telephone system, a term of art) in making telephone calls."

30 of 453 comments (clear)

  1. Different Ports by hoagieslapper · · Score: 5, Insightful

    How difficult could it be to write some software to use VoIP on port 80 or some other commonly used port?

    1. Re:Different Ports by rusty0101 · · Score: 5, Interesting

      port 80 as used for http is a tcp port, not a udp port.

      Some of the protocols that will eventually have to be blocked as a result include tftp, whois++, bootp/dhcp, ntp, udp portions of netbios, snmp (ISPs and large businesses, including the phone company, will love that one.) hsrp, (another favorite of large businesses) quake, traceroute, both MySQL and Postgres, and a few others that may not have tcp vairents, or who's tcp varients are too expensive in network bandwidth to use politely.

      Additionally, there is nothing preventing users from building a ppp, ssh, httptunnel or other tunnel over tcp and completely bypassing the UDP blocks from their workstation. It may even become a part of the software for DialPad or other platforms.

      -Rusty

      --
      You never know...
    2. Re:Different Ports by agentZ · · Score: 5, Insightful

      Additionally, there is nothing preventing users from building a ppp, ssh, httptunnel or other tunnel over tcp and completely bypassing the UDP blocks from their workstation. It may even become a part of the software for DialPad or other platforms.

      It could, but there's a reason why they avoided TCP in the first place. For phone calls, it doesn't matter if the data gets there two seconds after it was sent (ie. the reliable communication offered by TCP.) The data needs to get there now, or not at all. It's okay to have a quarter-second drop in a phone call.

      I also worry that the computational overhead of these protocols, especially ssh, could be problematic for a real-time communication. But hey, processors are getting better all the time...

    3. Re:Different Ports by Mister+Transistor · · Score: 5, Interesting

      It's already been done. The VoIP software "Fobbit Fone" is public domain or shareware, I can't remember which - freely available, anyway... It works with the Creative VoIP blaster and one of the configuration settings is to use TCP only and you pick the port. It uses port 80 (normal HTTP) for initial access, then goes to the same port as it normally would but uses TCP instead of UDP if configured that way. I'm using it sucessfully TCP only because I'm lazy and only wanted to turn on one port in my firewall :) Seriously, it does make it easier to connect through a firewall when using TCP only. In fact that software is the only choice if you are behind a firewall, as the stock Creative Labs driver and UI software doesn't work at all thru the firewall.

      --
      -- You are in a maze of little, twisty passages, all different... --
  2. They will need to also block every other port. by Nicopa · · Score: 5, Insightful

    There are 65534 other ports wich can be used for VoIP, they must block them too!

    1. Re:They will need to also block every other port. by atrus · · Score: 5, Funny

      In other news, Panama is back to using ip addresses to look at websites since DNS is now blocked in that country.

    2. Re:They will need to also block every other port. by The+Original+Yama · · Score: 5, Funny

      Soon they'll also be blocking shipping ports, including the Panama Canal. I've never heard of a country blockading itself before.

  3. Another good example of fear of progress by XJoshX · · Score: 5, Insightful


    People have tried to fight progressive technological evolution for ages and it has yet to ever work once. Any country making laws forcing its citizens to live behind the times is only hurting itself. What if panama had outlawed the original telephone because it hurt the post office? Granted, Voice IP isn't quite as drastic a step, but it is progress and it will succeed on its own merit, laws or no laws.

  4. In a Folow Up News Release by Quirk · · Score: 5, Funny

    The Panamania Government has decreed all citizens are to wear tin foil hats to block telepathic circumvention of POTS.

    --
    "Academicians are more likely to share each other's toothbrush than each other's nomenclature."
    Cohen
  5. Not hard at all... by Da+VinMan · · Score: 5, Interesting

    In fact, I think it would be a piece of cake to cobble together a proxy server that did just that. The clients wouldn't even have to change their software other than to point to the intermediate proxy server.

    The problem here though comes in talking to the rest of the world. The above-mentioned servers have to direct the traffic to the destination servers at some point. Those servers are completely outside the control of the subversives to be. Those servers have to know that the traffic being received is actually VoIP and deal with it appropriately.

    It can be done, but it will require servers outside of Panama to cooperate with the scheme.

    Of course, once the Panama government locates those sites (shouldn't be hard) they'll start gopher whacking them with a variety of tactics: legal shutdowns through warrants, DOS attacks, etc. Vendors from outside of Panama will also rush to fill the void, and that software will also subsequently be outlawed.

    The bottom line though is that the government will not be able to control the VoIP "problem" entirely without just pulling the plug on all Internet activity. That would be a steep price and they will face economic pressure to not do it.

    Oh well, they'll learn this one the hard way I guess.

    --
    Please mod this post only if you think others should/n't read this. I have enough ego^H^H^Hkarma. Thanks!
    1. Re:Not hard at all... by LarsG · · Score: 5, Insightful

      The bottom line though is that the government will not be able to control the VoIP "problem" entirely without just pulling the plug on all Internet activity.

      Too true.

      I'm actually more worried about collateral damage here - if the news report is correct then any traffic passing _through_ Panama would be subject to the filters - stopping any application that just happens to use one of the ports mentioned.

      --
      If J.K.R wrote Windows: Puteulanus fenestra mortalis!
    2. Re:Not hard at all... by rodgerd · · Score: 5, Insightful

      You've kind of missed the key point, though: once it starts becoming harder and requiring more knowledge to do it, the phone company will be safe again. The danger comes from pervasive, easy to use VoIP services which anyone can use. If the decree can drive it back to the point where only a few geeks are doing VoIP it's all a success for the telco.

    3. Re:Not hard at all... by F.Prefect · · Score: 5, Insightful
      any traffic passing _through_ Panama would be subject to the filters

      Although realistically this is unlikely to be a problem for any significant percentage of Net traffic. Topologically, Panama is most probably a spur on the Internet, rather than a hub. Most of the western hemisphere's traffic passes through the US west coast on its way to anywhere. By the time a given packet hits Panama, I'd lay good odds its actually bound for an endpoint in Panama.

      --
      --Ford Prefect
  6. Next day, several new protocols invented... by Polo · · Score: 5, Funny

    I would assume that there will soon be:

    VODNSOIP
    VOHTTPOIP
    VOICMP

  7. I don't see how this is moral or legal.. by Anonymous Coward · · Score: 5, Insightful


    Example: I buy a new tool. It is a clawhammer. For some reason, this deprives the company making nail removers of money, especially considering their old nail removers were overpriced.

    So, the government affiliated nail remover maker goes and makes buying clawhammers illegal.

    This is immoral. You can't just rent-a-law because your overpriced technology is being smashed by a preferrable alternative.

    I mean, just because you can buy laws (ie: riaa), doesn't mean it should be allowed to happen..

    1. Re:I don't see how this is moral or legal.. by PerryMason · · Score: 5, Insightful

      Yes it immoral, but thats just the way that capitalism 'works'. The same story is being played out all over the world in nations of varying technological advancement. Big business has developed a hold over government to the extent that in many many cases, the outdated or inferior technology becomes government sanctioned and the opposition becomes if not outlawed, then at least severely hampered in its development.

      This is a situation which, IMHO, will only increase as we see massive values for companies being created overnight (in business terms) for IT related products which are _bound_ to become outdated in a matter of a few years. For the lucky few like MS, they were able to get the wealth early, buy the politicians and can now sit back and reap the rewards. For anyone in competition, the barrier to entry just got a whole lot higher. Not only do you need a better product, but you need a spare billion dollars to throw at Capital Hill.

      Gotta love that combination of capitalism and 'democracy'.

      --
      "I'm tired of all this 'Aren't humanity great' bullshit. We're a virus with shoes" - Bill Hicks
  8. Re:Censorship = Damage? by xean · · Score: 5, Interesting

    What this article really demonstrates - and it's something that has been demonstrated before on countless occasions - and that is that most governments of the world believe the internet is something tangible and easilly controllable.

    This has been demonstrated here in Australia with the federal goverments push to sensor content and make ISP's liable for content that is served up from their service.

    It's been demonstrated by the Chineese government with their sensorship and blocking of sites like google.

    It has been shown by the USA's government in their restriction of encryption technology export.

    All of these things are easilly worked around by even the most non techsavvy user.

    Those of us who understand what the internet is and how it works understand that this sort of filtering will not work. These type sof things just show that until governments actually gain an understanding of the things they are trying to control they will continue to make fools of themselves. (btw: I'm surprised they dont want to block tcp ports 25, 110 & 143 (smtp,pop,imap) as people might send electronic mail rather than using the snail mail service).

  9. This isn't really all that different from what... by 3-State+Bit · · Score: 5, Interesting

    the U.S., as well as many other countries, already do, albeit in a different industry. When the U.S. says: "You, as a citizen, are not allowed to circumvent insuring your automobile, say by having infinity cash [sic] that you're willing to use to pay for any damages that you might inflict, but must go through a PRIVATE, government regulated insurance agency in order to use the public roads..."
    Except for satellite and other wireless communications, ALL VoIP in Panama (as elsewhere) goes through wires that sit on the Government's land (that would be everything). If I can't use a public road except by playing by the rules of regulated private companies, (even if I know of a cheaper alternative), why should Panamians be allowed to use data lines going through public land, except by playing by the rules of a regulated private company?

    Okay, that's the most contrived example I could think of. I don't think there's a closer equivalent -- some candidates were Edison (the electric company) - run public schools (look it up -- but you're not required to go to one, since you can homeschool) and private appraisals mandated in certain cases by the government.

    Anyway, uh, yeah, HOW DARE THEY.

  10. In case site gets /.'ed by tim0thy · · Score: 5, Informative

    In an apparent attempt to stem telephone company revenue losses due to Internet telephony, the government of Panama has decreed that 46 UDP ports be blocked by all Internet service providers.

    The ports include ones that are commonly used for voice over IP as well as some that are used for other purposes, apparently with the idea that these, too, could be used to circumvent the POTS (plain old telephone system, a term of art) in making telephone calls.

    In the decree, the Panamanian government requires "that within 5 days of publication, all ISPs will block the 46 UDP ports used for VoIP and any other that could be used in the future (which could end up being all UDP ports)," according to a reporter and computer consultant there, and that "the ISPs will block in their firewall or main router and in all their Border routers that connect with other autonomous systems."

    This "unequivocally decrees that all routers, including those not carrying traffic from Panama, but that might be traversing Panama, have the 46 UDP ports blocked."

    The significance of the government action affects areas far beyond that nation. Due to its geographical location, numerous undersea cables connect in the country, making it a substantial hub for international IP traffic.

    Among the services that are to be disrupted are NetMeeting, Dialpad, and Net2phone, which labels itself "communication without borders," a claim which apparently will no longer be true if one of those borders is Panamanian or communication is between two countries whose IP traffic passes through Panama.

    The decree is apparently rooted in complaints by Cable & Wireless Panama (Motto: "If you're worried about your data, voice, or Internet service provider, we're here to help"), which says it is losing money due to users employing the Internet to make otherwise expensive internetional telephone calls -- calls that would otherwise be listed on Cable & Wireless bills.

    The UDP ports involved include: 1034, 1035, 2090, 2091, 5000, 6801, 6802, 6803, 9900, 9901, 12080, 12120, 12122, 22555, 26133, 30582, 35061, 38000, 38100, 38200, 47563, 48310, 51200, and 51201.

    The decree was published October 25.

    Among the services that employ some of those ports are "nlockmgr," the NFS lock manager responsible for rpc.statd and rpc.lockd, which in turn are responsible for crash recovery functions for locked files and for processing file locking requests, respectively; telnet; and numerous VoIP services.

    In addition to those who wish to save on their phone bills, the government order blocks the perfectly lawful use of those ports by businesses that have legitimate VoIP applications allowed in the country.

    There were reports late Sunday that Panamanian ISPs were planning a demonstration aimed at exhibiting their displeasure with the government action.

  11. Possible reasons for this move? by uncleFester · · Score: 5, Interesting

    Out of simple curiosity, I plugged 'panama phone company' into Google.. after all, what could this little pissant country have in the way of phone companines? And what are the first two links to pop up?

    Privatization - Phone Company: and A Case of Privatization Gone Wrong: Panama's Wires Crossed. Perhaps this is the start of some revenue-generating stunt to pull some dumbass decision-maker's ass out of a fire somewhere?

    -fester (capt. conspiracy?)

    ps.. I'm sure Panamanians by and large dislike this as well.. the 'pissant' is directed at the governmental representation of Panama, which right now looks suspiciously like a boil on someone's ass.

    --
    -'fester
  12. I got a better solution by bogie · · Score: 5, Insightful

    Adapt or die. There is no rule that states established businesses get to do business "the old" forever. If a better cheaper way of doing things comes along, oh well, tough cookies. There were once a lot of blacksmiths as well. So to the phone companies I say, Adapt or Die, better yet just die.

    --
    If you wanna get rich, you know that payback is a bitch
  13. Cable & Wireless of "Panama" by Augusto · · Score: 5, Interesting

    This is very embarassing, but not a surprise.

    This is yet another example of our British friends at Cable & Wireless adapting to the local culture of the country which they're sucking the blood out of. They obviously have quickly learned the Panamenian way of politics and have paid off all the necessary politicians, which can often be bought very cheap.

    Cable & Wireless is privatization gone totally wrong. The previous phone company was a government owned company called INTEL, and Cable & Wireless beat US GTE and took over the phone system of Panama. The results have been horrible.

    Local calls in Panama used to be like in the US, you paid your minimal fee and could talk all the minutes you wanted. Cable & Wireless brought the wonderful European model of paying for each minute for local calls.

    If that wasn't enough, they also charge you per minute (I think) for calls from a land line phone in your house to a cell phone. That is, you pay for calling a cell phone and the person on the cell phone pays too. I had to find this the hard way after making a few calls to some friends from my grandmothers house.

    So, people are fed up with them, and the internet savy are using Voice over IP a lot. I used to receive a lot of calls from a cousing over dialpad.com (when it was free). This was the ideal system to make a call to the US, dialpad was for US calls only, but the funny thing is that this worked great if you lived in another country.

    Here's a good article on the whole mess Cable & Wireless is creating;

    A Case of Privatization Gone Wrong -
    Panama's Wires Crossed

    --

    - sigs are for wimps.
    1. Re:Cable & Wireless of "Panama" by bastion_xx · · Score: 5, Interesting

      Cable & Worthless has done this in other portions of the Caribbean too. Basically they will land fiber of put up the satellite up/downlink infrastructure, but in turn, require a monopoly on all international communications (assuming there is a local telco provider). Normally, savvy governments will get a percentage of the profits. Or even more "esoteric" monetary "arrangements" like the Cayman government had in place a few years back.

      The good news is that the move towards packet based services (i.e., the Internet) has thrown a kink in their business model.

      In Bermuda, a local ISP started offering VoIP back in 2000 on a DS3 provisioned into the US. Per minute charges via C&W: $1.10/minute. VoIP: $0.40/minute. Quality? A fuckload better on average than C&W. Now that the ISP has enabled SS7 for true 1+ dialing, the other traditional carriers have had to reduce prices.

      Once the service was made available to the public, they were then threatened with termination of the DS3 by the submarine cable provider (not C&W, although they were in on trying to regulate out the use of VoIP except by the international carriers).

      It was even worse when C&W mandated no other fiber systems could be brought into a country. They could set pricing on voice and data cicuits to milk the subscribers. Back in 96' a DS1 (T1) from Bermuda to NYC ran $85K... a month. Now it's down to a reasonable $17-22K/month (rack rate).

      Sorry for the rant, but I had a bad week with C&W. Dropped a production frame circuit and when calling the Bermuda NOC I was told that it was a US problem and to call them (altough I contract and pay the Bermuda office). US had dropped our email addresses (all 5 of them) from the announcement emails they send out. Some good service for over $100K per year in circuits.

      Grrrrrrr.

  14. Re:Suggestion to Panama by Multics · · Score: 5, Funny
    Or alternately, "Aren't you third-world-ish enough already without this kind of crap?"

    -- Multics

  15. The more things change... by Doktor+Memory · · Score: 5, Informative

    ...the more they stay the same. The third-world telco monopolies have been fighting a similar battle against long distance "callback" companies for over five years now, and for the most part they've been losing badly. They've known for a while that VoIP services were the next big threat, but it doesn't look like they have any better idea how to deal with them.

    One detail that usually gets left out of these articles, though: the "local third world telco monopoly" is not in any way a homegrown Panamanian entity. No, the citizens of Panama, like most of their neighbors in the carribean, are getting royally screwed by our dear friends at Cable and Wireless.

    --

    News for Nerds. Stuff that Matters? Like hell.

  16. Re:In other news... by g4dget · · Score: 5, Insightful

    The US did something worse: they subsidized inefficient transportation in the form of the personal automobile and the required infrastructure to support it. Politicians that must be considered corrupt dismantled public transportation around the country. The result have been urban sprawl and the breakdown of social networks, some of the longest commute times in the world, poor air quality, an unnecessary dependence on foreign oil, and enormous expenses for oil and cars.

  17. Typical of Panama in general. by PrimeNumber · · Score: 5, Interesting

    I lived in the country in the Mid-90s (after Manuel).

    And it once again sounds like the corrupt workings of their ruling junta.

    Typical situations:

    Transito (traffic cops) targetting rich foreigners for some BS violation, so they could receive bribe money. It was so common, that my friends always planned on taking extra cash to pay corrupt traffic cops.

    The railroad system turned over by the US (at the time already "turned over" to the Panamanian govt) which in a few years had became totally non-operational due to local inept management.

    Many reliable stories of gov't for hire (much like the US) where the politicos where bought off, not by campaign contributions, but people bought by large amounts of cash for personal gain.

    All in all the ordinary people of Panama were friendly and had the attitude: oh well it happens, might as well be happy. (Papas e chulatas) Potatoes and bacon. oh well.

    Personally I am surprised the Canal still operates. But one thing most Americans don't realize is that a provision in the treaty stipulates the US can reclaim it if it becomes non-operational. That in my opinion, is the reason the canal hasn't followed the fate of everything else "turned over" and ruined by its corrupt govt.

  18. IPSEC is the right choice for tunneling it. by billstewart · · Score: 5, Informative
    There are *lots* of things wrong with H.323, including its relationship to a bunch of baroque badly designed ISDN signalling protocols which don't look much like Internet approaches to problem-solving. (SIP is rather better-behaved.) One of the most critical problems is the lack of encryption, leaving the whole system open to eavesdroppers, with or without warrants. In this case, the obvious right choice is to use ipsec to tunnel the VOIP traffic, which takes care of C&W's anti-competitiveness as well as taking care of most wiretappers. (You can't stop all the wiretappers, because the telco side of the interface is still tappable, but it reduces many of the opportunities.)


    It's not perfect - Compressed RTP does a CSLIP-like elimination of most of the IP, UDP, and rTP overhead, but doesn't work over IPSEC or most other tunneling protocols.) That means bandwidth is pretty tight over 28.8-upstream dialup modems (especially if you don't always get full speed), but I'm not aware of any better tunneling solutions.
    It'd be nice to have some tradeoffs like putting more than one voice sample per IP packet, which is not so hot for quality but cuts the packet overhead in half, and the protocols *ought* to have encryption as a standard feature, so you don't need tunneling for the general case, but it's a good start.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  19. Re:Inefficient Transportation? by g4dget · · Score: 5, Interesting

    Then how do you suggest people that live in small towns get to work and shop if they do not have a personal automobile/roads? Mass transist does not work in a small town.

    I don't know whether you have lived in a small town. I have, in Europe. It took three minutes to walk to the supermarket, five minutes to walk to work, and three minutes to walk to the train station (which would take me directly to the airport and pretty much anywhere else). For short distance trips, I'd use a bicycle or the bus (fast and on-time).

    The quality of life there was unmatched by anything I have found in the Bay Area (where I live now), even though I made a fraction then of what I make now. The sad thing is that most Americans don't realize how poor the quality of life in America actually is. (In case you are wondering why I didn't stay there--it's because my friends, family, and job are here.)

    And some of those 'corrupt' politicians dismantled public transportation because it was/is a very large sinkhole for tax dollars.

    Cars are a much bigger "sinkhole" for tax dollars than public transportation. Even disregarding all the infrastructure costs, health costs and lost productivity from cars alone are enormous and dwarf anything spent on public transportation.

  20. I have a very long term solution by mark-t · · Score: 5, Interesting
    We can take this to its natural conclusion today...

    They want to block UDP ports that *can* be used for VOIP? Why not *make* 'em block all UDP and let them find out how screwed that actually leaves them? Wanna see a government backtrack on a previous decision really quick?

    Unless Panama wants to block all web browsing...

    Bear with me while I explain

    UDP is used for VOIP because TCP is a streaming protocol and as such isn't particularly useful for real-time data transmission -- as said by another poster elsewhere, it's preferable to just simply lose a packet every now and then rather than to have the connection pause suddenly while TCP handles congestion control.

    So... what I imagine is this: a system running VOIP listens to a randomly chosen UDP port rather than a specifically chosen one. The exact port to try to connect to is found by connecting to the system via the TCP port 80, and the VOIP system responds to the connection request letting the caller know which UDP port to actually use, and then the TCP connection is closed. The caller can then use the UDP port it was informed about. Since the system can be listening on ANY UDP port, possibly even one that would normally be used for some other well-known service, the government would have no choice but to create a ruling that would unilaterally block all UDP.

    Seriously... I think it would be close to hilarious to see what they would come up with to try to stop that.