[AusNOG] MS Exchange issues with Telstra

[Cameron Worts]

Hi Eric and everyone who contacted me off list.

Thanks for your help. We are now working with Russell from Telstra to resolve this issue.

Eric , I got one of the guys checking to see if they can hotspot their phone to the laptop.

Regards,

Cameron
-----Original Message-----
From: Eric Pinkerton [mailto:Eric.Pinkerton at datacom.com.au] 
Sent: Thursday, 5 March 2015 8:00 AM
To: Mark ZZZ Smith; Cameron Worts
Cc: Ausnog at ausnog.net
Subject: RE: [AusNOG] MS Exchange issues with Telstra

I think it's probably a stretch to imply that this problem is indicative that Telstra is knowingly interfering with encryption here.

I'm still interested in the cause here , but it's too early for aluminium millinery.

Cameron, have you tried tethering a laptop to the phone and inspecting the certificates etc?

E

-----Original Message-----
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Mark ZZZ Smith
Sent: 05 March 2015 09:54
To: Geordie Guy; Russell Langton
Cc: Ausnog at ausnog.net
Subject: Re: [AusNOG] MS Exchange issues with Telstra

+1


This query reminded me of this story:

"ISPs Removing Their Customers' Email Encryption"
https://www.eff.org/deeplinks/2014/11/starttls-downgrade-attacks



I'd find interference with TLS/SSL traffic quite suspicious, as I'd say more often than not it is intentional. The result of any level of interference is the introduction of a man-in-the-middle, breaking end-to-end security.

The only situation I'd find it slightly tolerable is in an enterprise where the enterprise has the right to monitor the use of its own resources. That being said, would enterprises also record all phone calls their staff make and receive using company phones including personal ones, violating phone call privacy? Probably not.
There is past form of Telstra doing dodgy things with mobile Internet traffic :

"Telstra accused of Next G web 'stalking'"
http://www.smh.com.au/digital-life/mobiles/telstra-accused-of-next-g-web-stalking-20120705-21ivs.html


________________________________
From: Geordie Guy <elomis at gmail.com>
To: Russell Langton <russell3901 at gmail.com> 
Cc: "Ausnog at ausnog.net" <ausnog at ausnog.net> 
Sent: Wednesday, 4 March 2015, 18:36
Subject: Re: [AusNOG] MS Exchange issues with Telstra



Can there be a reply to this on-list? I've seen it before and it later mysteriously goes away. It's basically on my list of things I want to understand one day.




On Wed, Mar 4, 2015 at 5:35 PM, Russell Langton <russell3901 at gmail.com> wrote:

Hi Cameron,
>Ive sent you an email.
>On 04/03/2015 5:31 PM, "Cameron Worts" <cameron at perthwebhosting.net.au> wrote:
>
>Guys,
>> 
>>I got a few clients with mobile devices who are with Telstra and can’t connect to our MS exchange server using SSL imap/pop3. I  can confirm that it’s working fine over wifi and using other carriers but not Telstra.  We have tried connecting the same account up on three different iphones – two of them been with Telstra and one with Optus. The mobile using Optus works perfectly whilst the mobiles on the Telstra network does not work. We can get to the owa page fine on all connections.
>> 
>>Before anyone says, Have you contacted Telstra, I can’t as I don’t have any services with Telstra.  
>> 
>>Regards,
>>Cameron 
>> 
>>_______________________________________________
>>AusNOG mailing list
>>AusNOG at lists.ausnog.net
>>http://lists.ausnog.net/mailman/listinfo/ausnog
>>
>>
>_______________________________________________
>AusNOG mailing list
>AusNOG at lists.ausnog.net
>http://lists.ausnog.net/mailman/listinfo/ausnog
>
>


_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

#####################################################################################
Confidentiality and Privilege Notice 
This document is intended solely for the named addressee.  The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
#####################################################################################