<div dir="ltr"><div><div>Hi Mark,<br><br></div>Email sent ;)<br></div><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, May 23, 2013 at 1:47 PM, Scott Anderson <span dir="ltr"><<a href="mailto:sanderson@aus-it.com.au" target="_blank">sanderson@aus-it.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-AU">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">It could be a MTU/ICMP problem.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">https sets the DNF bit from memory, while http does not. If ICMP is blocked somewhere along the path it’ll just drop the https packets, while the http packets
will just fragment.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">If they manage gateway router used by the https server I’d get them to try lowering the mss there and see if that helps.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1f497d;background:white">Scott</span><b><span style="font-family:"Calibri","sans-serif";color:#00b0f0" lang="EN-US"><u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#00b0f0" lang="EN-US"> </span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"" lang="EN-US">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"" lang="EN-US"> <a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a> [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Joshua D'Alton<br>
<b>Sent:</b> Thursday, 23 May 2013 1:02 PM<br>
<b>To:</b> Mark Tees<br>
<b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] Telstra 3g connections and port filtering in the Brisbane area<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">I haven't had this problem for years, but last had it on one of those PCMIAA old style things, and it turned out back then to be the wrong APN. telstra.wap i believe we used, vs telstra.internet. You can try call telstra business support
(as an authorised account holder), see what they say about APN and/or unblocking ports (can you check port 25 btw?) YMMV, good luck!<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Oh and all fine here in Melb on mob + dongle, as well as ACT and NSW 3g mobile.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Thu, May 23, 2013 at 12:53 PM, Mark Tees <<a href="mailto:mark.tees@digitalpacific.com.au" target="_blank">mark.tees@digitalpacific.com.au</a>> wrote:<u></u><u></u></p>
<p class="MsoNormal">Hi Noggers,<br>
<br>
We have had a ticket come in from a client in Brisbane where they report they cannot get to HTTPS/Port 443 on their server from their Telstra 3g mobile connection. They are saying that they have a number of other customers also on Telstra 3g that have the same
problem.<br>
<br>
They can get to port 80/HTTP just fine. Pings/traceroutes all look good. I have checked through all possible points on our network and it appears the traffic is just not getting through to us. I have been trying to get the effected customer to do a tcptraceroute
for me so we can spot where the packets are getting dropped.<br>
<br>
Everywhere else I checked from I can get to port 443 on their server.<br>
<br>
Is there anyone around on Telstra 3g in Brisbane that could possibly do a tcptraceroute to port 443 for me?<br>
<br>
Also, any pointers as to how the customer could get this escalated within Telstra?<br>
<br>
Thanks,<br>
<br>
Mark<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div></div></div>
<p><font face="Tahoma" size="1">
</font></p><hr><font face="Tahoma" size="1">
</font>
<p></p>
<p><font face="Tahoma"><font size="1"><font color="#ff0000">Attention: </font><br>This
e-mail and any files transmitted with it are privileged, private and
confidential information intended for the use <br>of the addressee. Neither the
confidentiality of nor any privilege in the e-mail is waived, lost or destroyed
<br>by the reason that it has been transmitted other than to the addressee. If
you are not the intended recipient <br>of this e-mail you are hereby notified
that you must not disseminate, copy or take any action in reliance on it. <br>If
you have received this e-mail in error please notify me immediately
on telephone # <a href="tel:%2B61%207%203624%209100" value="+61736249100" target="_blank">+61 7 3624 9100</a> or by <br>return e-mail. Please delete the
original e-mail.<br><br>This e-mail message has been scanned for Virus and
Content and cleared by <font color="#ff8000">MailMarshal</font>
</font></font></p><font face="Tahoma" size="1">
<hr>
</font>
<p></p></div>
<br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>