[TelstraClear] Proxy / Internet issues with National Bank

Forums › One New Zealand (including Vodafone, WxC, Farmside) › [TelstraClear] Proxy / Internet issues with National Bank

1 | 2

sleemanj

1490 posts

Uber Geek

#422061 28-Dec-2010 11:34

BarTender:
That's not strange at all, I am sure their edge firewalls are blocking icmp's which is pretty standard practice, especially for a bank.

Which is why you use tcptraceroute :-)

boffin@aspire-one:~$ tcptraceroute 156.13.216.84 443
Selected device wlan1, address 192.168.10.103, port 33228 for outgoing packets
Tracing the path to 156.13.216.84 on TCP port 443 (https), 30 hops max
1 192.168.10.1 0.828 ms 0.616 ms 0.580 ms
2 10.35.128.1 11.008 ms 11.549 ms 9.332 ms
3 lo0.internet.ivpn.pe22.telstraclear.net (218.101.61.114) 12.672 ms 14.239 ms 14.669 ms
4 ge-2-0-0-906.ie2.telstraclear.net (203.98.18.65) 35.279 ms 23.543 ms 25.741 ms
5 ggis-gige-v906.telstraclear.net (203.98.18.67) 25.924 ms 24.055 ms 25.322 ms
6 v4.aksw7.global-gateway.net.nz (210.55.202.51) 25.218 ms 25.745 ms 25.249 ms
7 203.96.67.198 23.735 ms 22.946 ms 98.524 ms
8 156.13.216.84 [unknown, ACK] 23.130 ms 25.316 ms *

---
James Sleeman
I sell lots of stuff for electronic enthusiasts...

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#423359 2-Jan-2011 11:28

Hummm seems very broken today on both my TCL and Telecom XT Datacards... Anyone else or is it just me.

rscole86

4974 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#423364 2-Jan-2011 11:41

I have just successfully logged in from my TNZ connection.

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#423371 2-Jan-2011 12:06

It's really weird. And I have logged a fault with NBNZ about it as it seems to be firewall weirdness on their side as I have duped this with 5 different internet connections (TCL Cable, Telecom XT, Vodafone Mobile Data, Work proxy server in the US, Work proxy server in NZ going via Orcon).

If I connect directly to https://secure.nbnz.co.nz/IBCS/pgLogin then it fails to respond... I can't then do a wget or any other telnet test to see if the site is up.

But if I first browse to the unencrypted site http://156.13.216.84/ or http://secure.nbnz.co.nz which redirects me back to http://www.nbnz.co.nz then try and login to the SSL site it works fine.

I think they have an IDS or some sort of door knocking style login process that requires you to first connect to the cleartext port on http then redirect to the https port afterwards. And not go direct to the HTTPS port.

Waiting 15-30 mins seems to kick it back into life if I have first accidently clicked on the https url before going to the http first.

Weirdness......

https://secure.nbnz.co.nz/IBCS/pg

1 | 2