Archive for May, 2010

The Great Wall of Vodacom – FAIL

Tuesday, May 25th, 2010

Right, so Kevin (one of my staff) had the savvy to take a few tcpdump traces on both the client and the server side of a failed PPtP VPN connection over the weekend. The result? It seems the great firewall of Vodacom has yet again taken another victem. (more…)

Vodacom – still messing with TCP/IP?

Monday, May 24th, 2010

Some of you may recall that a whilst back I wrote a blog entry (two actually) regarding Vodacom messing with (and breaking) TCP/IP. Specifically they adjust (present tense seeing that it’s still happening) the ISN from the TCP connection initiator (client) to the server, and they hold up RFC 1948 (here) to substantiate why they do this. As explained in my previous entry regarding this issue their reason is bogus and invalid. I additionally proceeded to explain why their inherent disregard for the TCP/IP standards by which the rest of the world abides in fact creates additional exposure for exploiting such vulnerabilities. Whilst my response at the time was quite harshly phrased it remains valid. (more…)