[AusNOG] Telstra blocking ICMP

[Lee Allemand]

Also run opengear’s have a device now showing as down, Telstra.wap/Telstra.internet APN, only started a week ago for us.

WR

Lee

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Ryan van Klaveren
Sent: Wednesday, 17 April 2019 2:24 PM
To: Russell Langton <russell3901 at gmail.com>
Cc: ausnog <ausnog at lists.ausnog.net>
Subject: Re: [AusNOG] Telstra blocking ICMP

Hey guys,

I just wanted to say we've seen the same issue with our Telstra SIMs.

I found that the packet gets to the device, but it's the ECHO REPLY that doesn't come back:

*Apr 17 04:23:47.532: ICMP: echo reply sent, src 123.209.141.41, dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:47.752: ICMP: echo reply sent, src 123.209.141.41, dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:52.544: ICMP: echo reply sent, src 123.209.141.41, dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:52.568: ICMP: echo reply sent, src 123.209.141.41, dst X.X.X.X, topology BASE, dscp 0 topoid 0
*Apr 17 04:23:57.535: ICMP: echo reply sent, src 123.209.141.41, dst X.X.X.X, topology BASE, dscp 0 topoid 0


Kind regards,
     Ryan

On Fri, Mar 22, 2019 at 8:36 AM Russell Langton <russell3901 at gmail.com<mailto:russell3901 at gmail.com>> wrote:
Hi James,
That doesn't sounds good at all, I'll flick you are direct email to get sorted.

On Thu, Mar 21, 2019 at 8:25 PM James Loh <jloh at squiz.net<mailto:jloh at squiz.net>> wrote:
Hey Ross,

That’s pretty much exactly what we see. SSH works fine but ICMP just fails. They do flap a bit but even resetting the dialout interface and getting a new IP doesn’t resolve it.

Cheers,
James

On Thu, 21 Mar 2019 at 4:55 pm, Ross [Eve IT] <ross at eve-it.net<mailto:ross at eve-it.net>> wrote:
Hi James,

We also have Opengear OOB devices around the country (Telstra 3G/4G on the telstra.extranet APN) and have noticed that they bounce quite often and actually remain down.
Yet 9 out of 10 times we can still pass ssh through to the consoles.

It's pretty recent, and I haven't been able to get a straight answer from Telstra.
I think they may be doing some kind of rate limiting and blocking for a certain amount of time.

Have not been able to confirm.

Regards,
Ross.


On Thu, Mar 21, 2019 at 2:54 PM James Loh <jloh at squiz.net<mailto:jloh at squiz.net>> wrote:
Hi all,

Sorry for the noise but I'm not sure who to reach out to and we don't have an account manager or anything (only a few SIMs).

We've got a standard Telstra service that we use in Opengear devices for OOB access. Recently (~6th of March) we've seen ICMP traffic completely dropped and it never reaches the device. TCP port 22 works fine however which is a bit weird!

Anyone ran into anything like this before?

Cheers,
James
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20190417/6596714c/attachment.html>