[AusNOG] Telstra blocking ICMP

[Ryan van Klaveren]

Hey guys,

I just wanted to say we've seen the same issue with our Telstra SIMs.

I found that the packet gets to the device, but it's the ECHO REPLY that
doesn't come back:

*Apr 17 04:23:47.532: ICMP: echo reply sent, src 123.209.141.41, dst
X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:47.752: ICMP: echo reply sent, src 123.209.141.41,
dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:52.544: ICMP: echo reply sent, src 123.209.141.41,
dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:52.568: ICMP: echo reply sent, src 123.209.141.41,
dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:57.535: ICMP: echo reply sent, src 123.209.141.41,
dst X.X.X.X, topology BASE, dscp 0 topoid 0


Kind regards,
     Ryan

On Fri, Mar 22, 2019 at 8:36 AM Russell Langton <russell3901 at gmail.com>
wrote:

> Hi James,
>
> That doesn't sounds good at all, I'll flick you are direct email to get
> sorted.
>
> On Thu, Mar 21, 2019 at 8:25 PM James Loh <jloh at squiz.net> wrote:
>
>> Hey Ross,
>>
>> That’s pretty much exactly what we see. SSH works fine but ICMP just
>> fails. They do flap a bit but even resetting the dialout interface and
>> getting a new IP doesn’t resolve it.
>>
>> Cheers,
>> James
>>
>> On Thu, 21 Mar 2019 at 4:55 pm, Ross [Eve IT] <ross at eve-it.net> wrote:
>>
>>> Hi James,
>>>
>>> We also have Opengear OOB devices around the country (Telstra 3G/4G on
>>> the telstra.extranet APN) and have noticed that they bounce quite often and
>>> actually remain down.
>>> Yet 9 out of 10 times we can still pass ssh through to the consoles.
>>>
>>> It's pretty recent, and I haven't been able to get a straight answer
>>> from Telstra.
>>> I think they may be doing some kind of rate limiting and blocking for a
>>> certain amount of time.
>>>
>>> Have not been able to confirm.
>>>
>>> Regards,
>>> Ross.
>>>
>>>
>>> On Thu, Mar 21, 2019 at 2:54 PM James Loh <jloh at squiz.net> wrote:
>>>
>>>> Hi all,
>>>>
>>>> Sorry for the noise but I'm not sure who to reach out to and we don't
>>>> have an account manager or anything (only a few SIMs).
>>>>
>>>> We've got a standard Telstra service that we use in Opengear devices
>>>> for OOB access. Recently (~6th of March) we've seen ICMP traffic completely
>>>> dropped and it never reaches the device. TCP port 22 works fine however
>>>> which is a bit weird!
>>>>
>>>> Anyone ran into anything like this before?
>>>>
>>>> Cheers,
>>>> James
>>>> _______________________________________________
>>>> AusNOG mailing list
>>>> AusNOG at lists.ausnog.net
>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>
>>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20190417/9d037530/attachment.html>