2degrees not sending connection refused for data

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2degrees not sending connection refused for data

mercutio

1392 posts

Uber Geek
+1 received by user: 134

#181221 7-Oct-2015 00:01

so it seems 2degrees is doing some special proxy thing or something, and when connecting to a host that rejects a connection it opens a connection and closes it straight away.

is it possible to get a direct net connection through 2degrees somehow?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1401452 7-Oct-2015 07:26

direct APN may help

Their setup is terrible, as I discovered a few weeks ago after wasting an hour dealing with an issue - you can't even use a PPTP VPN on 2d without using the direct APN. If I'd googled the issue and seen the multiple threads on here first I would have saved an hour of my life!

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#1401453 7-Oct-2015 07:43

sbiddle: direct APN may help

Their setup is terrible, as I discovered a few weeks ago after wasting an hour dealing with an issue - you can't even use a PPTP VPN on 2d without using the direct APN. If I'd googled the issue and seen the multiple threads on here first I would have saved an hour of my life!

From memory they are using F5's for CGNAT and for who knows what reason the F5 does not do PPTP VPN passthrough. It really is a bit strange that F5/2degrees have not fixed that issue over the years. I know lots of kit that does large scale CGNAT and no one else seems to have that issue. F5 is at the high end of the cost scale for the job as well.

mercutio

1392 posts

Uber Geek
+1 received by user: 134

#1401550 7-Oct-2015 10:24

sbiddle: direct APN may help

Their setup is terrible, as I discovered a few weeks ago after wasting an hour dealing with an issue - you can't even use a PPTP VPN on 2d without using the direct APN. If I'd googled the issue and seen the multiple threads on here first I would have saved an hour of my life!

i'd rather not have a real ip on the internet, just not break normal outgoing tcp connections.

it seems that used direct still does it though.