<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-AU link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Yeah, unfortunately we only handle radius authentication and
then hand off the session for M2 to handle so I think we’re limited in what we
can do in regards to passing radius options to force MTU etc..<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Cody – the MTU fix does work (dropping MTU to 1400) for those
customers affected (and cant process payroll) – we’ve had a few like that..<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>That said, our internal testing has also identified that its not
all M2 connections, doesn’t appear to be similar IP ranges or exchanges,
however we’ve been compiling a list of modems of affected clients and the
Netgear D834G and the Dlink DSL504 both feature prominently (that said, they
were both our standard routers for a while) but we haven’t seen any others
really affected yet..<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Both appear to have a TI related chipset but we’ve passed that
info onto to M2 without much further response...<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-JT<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:
"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'> ausnog-bounces@lists.ausnog.net
[mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>Cody Appleby<br>
<b>Sent:</b> Friday, 12 March 2010 1:00 PM<br>
<b>To:</b> Craig Meyers<br>
<b>Cc:</b> <ausnog@lists.ausnog.net><br>
<b>Subject:</b> Re: [AusNOG] Are there any other providers who use M2 as an
upstream having issues with SSL based websites?<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'>Confirmed. Very annoying.
Customers unable to do payroll!!!<br>
<br>
On 12/03/2010, at 15:03, "Craig Meyers" <<a
href="mailto:Craig.Meyers@citec.com.au">Craig.Meyers@citec.com.au</a>>
wrote:<o:p></o:p></p>
</div>
<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>The easy solution to fix multiple connections for MTU issues, is to
add "ip tcp adjust-mss blah" if cisco kit on a 'central-ish' device,
where blah is somewhere between 536 and 1460 depnding on the solar flare count
of the day.</span><o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>What it does is that on SYN/SYN-ACK exchange it modifies the MSS
option in the TCP packet to force both ends of the conversation to use lower
size packets. Thereby negating the deal to modify MTU on kit you may/may not
manage inbetween.</span><o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>I know it's a hack, but hey if desperate...</span><o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>-- Craig Meyers</span><o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal> <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<div class=MsoNormal align=center style='text-align:center'><span lang=EN-US>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal style='margin-bottom:12.0pt'><b><span lang=EN-US
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> <a
href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>
[mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>Justin Twiss<br>
<b>Sent:</b> Tuesday, 9 March 2010 1:10 PM<br>
<b>To:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> [AusNOG] Are there any other providers who use M2 as an
upstream having issues with SSL based websites?</span><span lang=EN-US><o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'>If so,
please contact me off-list – As far as I’m concerned, M2’s response of ‘get
your customers to change the MTU on their routers down to 1400’ really isn’t
acceptable and this apparently has been on-going since Thursday. (SSL
based websites in particular, banking websites – we’ve had reports of clients
unable to access/successfully log in to almost every major bank in Australia so
far)</span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'>(Just
glad they’re not our only upstream provider!)</span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:9.5pt;font-family:"Verdana","sans-serif";color:black'> </span><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#14294F'>Justin
Twiss</span></b><span style='color:black'><br>
</span><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:#7D7D7D'>Hosting Manager</span><o:p></o:p></p>
<table class=MsoNormalTable border=0 cellpadding=0 width="100%"
style='width:100.0%'>
<tr>
<td width=68 style='width:51.0pt;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='color:black'><image001.gif></span><o:p></o:p></p>
</td>
<td width=520 style='width:390.0pt;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7D7D7D'>Bekkers,
884 Beaufort Street, Inglewood, WA, 6052<br>
<b>Telephone:</b> +618 9422 6777<br>
<b>Mobile: </b>0405 555 044</span><span style='font-size:8.0pt;
font-family:"Verdana","sans-serif";color:#7D7D7D'><br>
</span><b><span style='font-size:7.5pt;font-family:"Verdana","sans-serif";
color:#7D7D7D'>Facsimile:</span></b><span style='font-size:7.5pt;font-family:
"Verdana","sans-serif";color:#7D7D7D'> +618 9272 6625<br>
<u><a href="mailto:Justin.Twiss@bekkers.com.au"
title="Click to send email to Justin Twiss"><span style='color:#7D7D7D'>Justin.Twiss@bekkers.com.au</span></a></u>
| <u><a href="http://www.bekkers.com.au" title="Click to visit our website"><span
style='color:#7D7D7D'>www.bekkers.com.au</span></a></u></span><o:p></o:p></p>
</td>
<td style='padding:.75pt .75pt .75pt .75pt'></td>
</tr>
<tr>
<td style='padding:.75pt .75pt .75pt .75pt'>
<table class=MsoNormalTable border=0 cellpadding=0>
<tr>
<td style='padding:.75pt .75pt .75pt .75pt'></td>
</tr>
</table>
</td>
<td style='padding:.75pt .75pt .75pt .75pt'></td>
<td style='padding:.75pt .75pt .75pt .75pt'></td>
</tr>
</table>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p>
</div>
</div>
</blockquote>
<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'>
<div>
<p class=MsoNormal>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
</div>
</blockquote>
</div>
</body>
</html>