[AusNOG] Telstra 3g connections and port filtering in the Brisbane area

[Scott Anderson]

It could be a MTU/ICMP problem.

https sets the DNF bit from memory, while http does not. If ICMP is blocked somewhere along the path it'll just drop the https packets, while the http packets will just fragment.

If they manage gateway router used by the https server I'd get them to try lowering the mss there and see if that helps.

Scott

From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Joshua D'Alton
Sent: Thursday, 23 May 2013 1:02 PM
To: Mark Tees
Cc: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Telstra 3g connections and port filtering in the Brisbane area

I haven't had this problem for years, but last had it on one of those PCMIAA old style things, and it turned out back then to be the wrong APN. telstra.wap i believe we used, vs telstra.internet. You can try call telstra business support (as an authorised account holder), see what they say about APN and/or unblocking ports (can you check port 25 btw?) YMMV, good luck!

Oh and all fine here in Melb on mob + dongle, as well as ACT and NSW 3g mobile.

On Thu, May 23, 2013 at 12:53 PM, Mark Tees <mark.tees at digitalpacific.com.au<mailto:mark.tees at digitalpacific.com.au>> wrote:
Hi Noggers,

We have had a ticket come in from a client in Brisbane where they report they cannot get to HTTPS/Port 443 on their server from their Telstra 3g mobile connection. They are saying that they have a number of other customers also on Telstra 3g that have the same problem.

They can get to port 80/HTTP just fine. Pings/traceroutes all look good. I have checked through all possible points on our network and it appears the traffic is just not getting through to us. I have been trying to get the effected customer to do a tcptraceroute for me so we can spot where the packets are getting dropped.

Everywhere else I checked from I can get to port 443 on their server.

Is there anyone around on Telstra 3g in Brisbane that could possibly do a tcptraceroute to port 443 for me?

Also, any pointers as to how the customer could get this escalated within Telstra?

Thanks,

Mark
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog


###################################################################################
Attention: 
This e-mail and any files transmitted with it are privileged, private and confidential
information intended for the use of the addressee. Neither the confidentiality
of nor any privilege in the e-mail is waived, lost or destroyed by the reason
that it has been transmitted other than to the addressee. 
If you are not the intended recipient of this e-mail you are hereby notified that 
you must not disseminate, copy or take any action in reliance on it. If you have 
received this e-mail in error please notify me immediately on 
telephone # +61 7 3624 9100 or by return e-mail. Please delete the original e-mail.

This e-mail message has been scanned for Viruses and Content and cleared 
by MailMarshal
###################################################################################
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20130523/5764d835/attachment.html>