[AusNOG] MS Exchange issues with Telstra

[Peter Tonoli]

We had an issue here, not long ago, that was caused by Telstra DSCP tags on traffic from mobiles. The problem arose due to the change of border routers no longer discarding the DSCP tags, and leaf routers then choking on the tagged packets.

----- Original Message -----
> From: "Eric Pinkerton" <Eric.Pinkerton at datacom.com.au>
> To: "Mark ZZZ Smith" <markzzzsmith at yahoo.com.au>, "Cameron Worts" <cameron at perthwebhosting.net.au>
> Cc: "Ausnog at ausnog.net" <ausnog at ausnog.net>
> Sent: Thursday, 5 March, 2015 11:00:18 AM
> Subject: Re: [AusNOG] MS Exchange issues with Telstra
> I think it's probably a stretch to imply that this problem is
> indicative that Telstra is knowingly interfering with encryption here.
> 
> I'm still interested in the cause here , but it's too early for
> aluminium millinery.
> 
> Cameron, have you tried tethering a laptop to the phone and inspecting
> the certificates etc?
> 
> E
> 
> -----Original Message-----
> From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of
> Mark ZZZ Smith
> Sent: 05 March 2015 09:54
> To: Geordie Guy; Russell Langton
> Cc: Ausnog at ausnog.net
> Subject: Re: [AusNOG] MS Exchange issues with Telstra
> 
> +1
> 
> 
> This query reminded me of this story:
> 
> "ISPs Removing Their Customers' Email Encryption"
> https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks
> 
> 
> 
> I'd find interference with TLS/SSL traffic quite suspicious, as I'd
> say more often than not it is intentional. The result of any level of
> interference is the introduction of a man-in-the-middle, breaking
> end-to-end security.
> 
> The only situation I'd find it slightly tolerable is in an enterprise
> where the enterprise has the right to monitor the use of its own
> resources. That being said, would enterprises also record all phone
> calls their staff make and receive using company phones including
> personal ones, violating phone call privacy? Probably not.
> There is past form of Telstra doing dodgy things with mobile Internet
> traffic :
> 
> "Telstra accused of Next G web 'stalking'"
> http://www.smh.com.au/digital-life/mobiles/telstra-accused-of-next-g-web-stalking-20120705-21ivs.html
> 
> 
> ________________________________
> From: Geordie Guy <elomis at gmail.com>
> To: Russell Langton <russell3901 at gmail.com>
> Cc: "Ausnog at ausnog.net" <ausnog at ausnog.net>
> Sent: Wednesday, 4 March 2015, 18:36
> Subject: Re: [AusNOG] MS Exchange issues with Telstra
> 
> 
> 
> Can there be a reply to this on-list? I've seen it before and it later
> mysteriously goes away. It's basically on my list of things I want to
> understand one day.
> 
> 
> 
> 
> On Wed, Mar 4, 2015 at 5:35 PM, Russell Langton
> <russell3901 at gmail.com> wrote:
> 
> Hi Cameron,
> >Ive sent you an email.
> >On 04/03/2015 5:31 PM, "Cameron Worts"
> ><cameron at perthwebhosting.net.au> wrote:
> >
> >Guys,
> >>
> >>I got a few clients with mobile devices who are with Telstra and
> >>can’t connect to our MS exchange server using SSL imap/pop3. I can
> >>confirm that it’s working fine over wifi and using other carriers
> >>but not Telstra. We have tried connecting the same account up on
> >>three different iphones – two of them been with Telstra and one with
> >>Optus. The mobile using Optus works perfectly whilst the mobiles on
> >>the Telstra network does not work. We can get to the owa page fine
> >>on all connections.
> >>
> >>Before anyone says, Have you contacted Telstra, I can’t as I don’t
> >>have any services with Telstra.
> >>
> >>Regards,
> >>Cameron
> >>
> >>_______________________________________________
> >>AusNOG mailing list
> >>AusNOG at lists.ausnog.net
> >>http://lists.ausnog.net/mailman/listinfo/ausnog
> >>
> >>
> >_______________________________________________
> >AusNOG mailing list
> >AusNOG at lists.ausnog.net
> >http://lists.ausnog.net/mailman/listinfo/ausnog
> >
> >
> 
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> 
> #####################################################################################
> Confidentiality and Privilege Notice
> This document is intended solely for the named addressee. The
> information contained in the pages is confidential and contains
> legally privileged information. If you are not the addressee indicated
> in this message (or responsible for delivery of the message to such
> person), you may not copy or deliver this message to anyone, and you
> should destroy this message and kindly notify the sender by reply
> email. Confidentiality and legal privilege are not waived or lost by
> reason of mistaken delivery to you.
> #####################################################################################
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
Peter Tonoli < peter at medstv.unimelb.edu.au > +61-3-9231-2399