There was a complaint about a guy no longer able to use his hanset for
VPN access.
In terms of WAP, stuff has definitely changed.
When a WAP request is handled by the WAP gateway (APN), it is converted
to an HTTP request with special headers by the gateway.
Here is what it looked like in the past:
--------------------------------------------------------------------------------
#HTTP_PRAGMA no-cache
#HTTP_ACCEPT
application/vnd.wap.wmlc;Type=4365,application/vnd.wap.wmlc,applicatio
n/vnd.wap.wmlscriptc,application/vnd.wap.multipart.related,application
/vnd.wap.multipart.mixed,application/octet-stream,text/plain,text/css,
image/bmp,image/gif,image/jpeg,image/png,image/vnd.wap.wbmp,applicatio
n/vnd.wap.sic,application/vnd.wap.slc,application/vnd.wap.coc,applicat
ion/vnd.wap.xhtml+xml,application/xhtml+xml;profile="http://www.wapfor
um.org/xhtml",text/html,application/smil,application/vnd.wap.mms-messa
ge,audio/midi,audi
#HTTP_USER_AGENT SIE-M55/09 UP.Browser/6.1.0.5.c.6 (GUI) MMP/1.0
#HTTP_ACCEPT_CHARSET UTF-8,*;q=0.001
#HTTP_ACCEPT_LANGUAGE en
#HTTP_ACCEPT_ENCODING *;q=0.001
#HTTP_VIA 1.1 squid.fido.ca:3128 (Squid/2.3.STABLE5)
#HTTP_X_FORWARDED_FOR 205.151.11.27
#HTTP_HOST vaxination.dyndns.org
#HTTP_CACHE_CONTROL max-age=259200
#HTTP_CONNECTION keep-alive
----------------------------------------------------------------------------------
Here is what it looks now with last weeks changes:
#HTTP_HOST wap.vaxination.ca
#HTTP_ACCEPT
application/vnd.wap.wmlc;Type=4365, application/vnd.wap.wmlc,
application/vnd.wap.wmlscriptc,
application/vnd.wap.multipart.related,
application/vnd.wap.multipart.mixed,
application/vnd.phonecom.mmc-wbxml, application/octet-stream,
application/vnd.openwave.pp, text/plain, text/css, image/bmp,
image/gif, image/jpeg, image/png, image/vnd.wap.wbmp,
application/vnd.wap.sic, application/vnd.wap.slc,
application/vnd.wap.coc, application/vnd.wap.xhtml+xml,
application/xhtml+xml;profile="http://www.wapforum.org
#HTTP_ACCEPT_CHARSET utf-8,*
#HTTP_ACCEPT_LANGUAGE en
#HTTP_ENCODING_VERSION 1.3, 10 1.3
#HTTP_USER_AGENT SIE-M55/09 UP.Browser/6.1.0.5.c.6 (GUI) MMP/1.0 UP.Link/6.2.3.15.0
#HTTP_X_UP_DEVCAP_CHARSET utf-8
#HTTP_X_UP_DEVCAP_MAX_PDU 53248
#HTTP_X_UP_UPLINK montrealpush.gprs.rogers.com
#HTTP_X_WAP_PROFILE "http://communication-market.siemens.de/UAProf/M55_09.xml"
#HTTP_X_UP_SUBNO 15145551212_montrealpush.gprs.rogers.com
#HTTP_VIA 1.1 mo2magproxy1.int.gprs.rogers.com
#HTTP_CONNECTION close
The IP of the request is still 205.205.50.30, so I *assume* that it is
NATted. I find it odd that my handset would have kept the same IP all
this time. (is it possible ?)
The User Agent: field was modified, with the MMP having different version.
The UPLINK is new, pointing to rogers.com
the VIA is different, pointing to rogers and not fido.
the UP_SUBNO is new, and contains the telephone number of the hanset
(replaced above with 555-1212). This is a big improvement since scripts
can now authorize based on the telephone number of the subscriber. This
was previously not possible. It is not known if the total SUBNO string
changes if you roam (eg: if I travel to vancouver). Also, the specs
allow for some random but unique string to didentify a customer (thus
not revealing person's phone number). Rogers seems to have chosen to
reveal the telephone numbers.
the PROFILE field is also new. This is an XML document which contains an
XML document describing capabilities of the handset (such as screen
size).
Note that Rogers doesn't provide a "forwarded for" which contains the
actual IP of the handset. (if this is NATed, such IP would be useless
since it would be unreachable from the net.
With the chances, is it possible that Rogers would allow push MMS
messages ? (eg: a computer on the net sending an MMS message to a
handset (as opposed to hansets pulling info from the server)
To those who have laptops connected to the handset: if you could find
out what IP the network now gives you
(ifconfig -a from the command line), it might help understand how they
set this up.
Robert Brown - 24 Aug 2005 08:24 GMT
> There was a complaint about a guy no longer able to use his hanset for
> VPN access.
[quoted text clipped - 73 lines]
> (ifconfig -a from the command line), it might help understand how they
> set this up.
PPP adapter Fido GPRS:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 205.205.80.119
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 205.205.80.119
JF Mezei - 25 Aug 2005 06:46 GMT
> PPP adapter Fido GPRS:
>
> Connection-specific DNS Suffix . :
> IP Address. . . . . . . . . . . . : 205.205.80.119
> Subnet Mask . . . . . . . . . . . : 255.255.255.255
> Default Gateway . . . . . . . . . : 205.205.80.119
What DNS server does the PPP negotiation provide your laptop ?
Seems to be a routable IP.
What would need to be done is for you to setup your laptop to be
connected, get your IP, then ask somone on the internet to traceroute to
it, as well as ping it.
I just tried to connect again, and this time, instead of getting
205.205.80.30, I got 205.205.80.244
A few minutes later, it was .10. Checking my email repeatedly gave me a
new IP everytime. (.11, .12, .13)
So my theory of Fido customers going through a NAT gateway is not valid.
And we are definitely getting dynamic IPs.
What is interesting is that those IP adresses don't have reverse
translation. Not a good IP management tactic. And not good when you
connect to remote systems who check to make sure the client has reverse
translation.
These IPs belong to a companmy that no longer exists, long ago absorbed
into UUNET, then gobbled by Worldcom. (And the leftovers of Worldcom,
namely MCI, are now being bought by Verizon). And the name server
(ns.interlink.net) points to a small company in montreal ( rezonet.net )
whose whois entry was last updated in 1995 with a contact name pointing
to interlink.net ).
Note that Microcell I5's IP block (used for main fido.ca adresses) was
reassigned from a UUNET IP block.
The IPs given to customers's handsets have not been reassigned and still
belong to the metrix interlink company which no longer exists.
Interestingly:
the APN internet.fido.ca doesn't have DNS translation from the Internet
wap.fido.ca still points to a fido host
mms.fido.ca points to "data on air" company in florida.
These translations are probably not the same as what the handset is
getting from the DNS servers serving the handsets.
Robert Brown - 26 Aug 2005 04:41 GMT
Ok, here I forgot to use the /all option in ipconfig last time
PPP adapter Fido GPRS:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 205.205.80.30
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 205.205.80.30
DNS Servers . . . . . . . . . . . : 207.181.101.4
207.181.101.5
traceroute to 205.205.80.30 (205.205.80.30), 30 hops max, 40 byte packets
1 142.46.199.161 (142.46.199.161) 0.639 ms 0.525 ms 0.776 ms
2 AL-GSR-GigE0-2.telecomottawa.net (142.46.200.2) 0.521 ms 0.486 ms
0.457 ms
3 tol-gw.hydroone.com (142.46.130.9) 0.788 ms 0.726 ms 0.733 ms
4 142.46.128.13 (142.46.128.13) 6.301 ms 6.299 ms 6.256 ms
5 142.46.128.1 (142.46.128.1) 6.900 ms 6.767 ms 6.850 ms
6 142.46.0.5 (142.46.0.5) 6.363 ms 6.250 ms 6.268 ms
7 65.89.249.105 (65.89.249.105) 17.279 ms 17.054 ms 16.963 ms
8 so-2-1-0.c1.wash.broadwing.net (216.140.8.81) 21.921 ms 21.889 ms
21.809 ms
9 216.140.8.174 (216.140.8.174) 21.732 ms 21.728 ms 21.686 ms
10 216.140.8.5 (216.140.8.5) 23.110 ms 22.664 ms 152.554 ms
11 GigabitEthernet5-2.GW5.IAD8.ALTER.NET (157.130.48.117) 35.647 ms
35.214 ms 45.708 ms
12 0.so-5-1-0.XL1.IAD8.ALTER.NET (152.63.36.54) 35.197 ms 35.095 ms
35.164 ms
13 0.so-3-1-0.XL1.MTL1.ALTER.NET (152.63.133.54) 40.093 ms 40.215 ms
39.943 ms
14 0.so-3-0-0.XR1.MTL1.ALTER.NET (152.63.133.46) 40.570 ms 44.648 ms
39.957 ms
15 193.ATM6-0.GW1.MTL2.ALTER.NET (152.63.130.57) 40.720 ms 40.401 ms
40.466 ms
16 custname-gw.customer.alter.net (205.205.235.126) 40.608 ms 40.327
ms 40.6 22 ms
17 205.205.50.69 (205.205.50.69) 25.887 ms 26.206 ms 40.480 ms
18 * * *
19 * *
Hope this helps
Rob
>
>> PPP adapter Fido GPRS:
[quoted text clipped - 48 lines]
> These translations are probably not the same as what the handset is
> getting from the DNS servers serving the handsets.
Robert Brown - 25 Aug 2005 06:30 GMT
Tonight I get the following:
PPP adapter Fido GPRS:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 205.205.80.84
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 205.205.80.84