Re: Looking for contact within Comcast Xfinity
I ran into this a few days ago. Both the random agent I talked to and our sales rep said they can't disable the security edge service without increasing the cost of service for all of our accounts. Apparently it costs more to not molest DNS traffic leaving your network. They can temporarily disable it, but they said it will turn back on when the modem is rebooted. It seems to only affect TCP and UDP port 53. I fixed it by setting all of our routers to use DoH and DoT exclusively. They can't intercept and molest that traffic. -A On Tue, Aug 23, 2022, 05:39 Michael Brown wrote: > If anyone from Comcast Xfinity is on this list, can you please reach out > to me? > > We're getting increased reports of xFi Advanced Security customers being > unable to access hosted sites and attempting to open tickets has had no > success. > > Thanks, > > Michael Brown > >
Re: Looking for contact within Comcast Xfinity
Comcast also molests SIP. From: NANOG on behalf of "Aaron C. de Bruyn via NANOG" Reply-To: "Aaron C. de Bruyn" Date: Tuesday, August 23, 2022 at 7:47 AM To: Michael Brown Cc: North American Network Operators' Group Subject: Re: Looking for contact within Comcast Xfinity I ran into this a few days ago. Both the random agent I talked to and our sales rep said they can't disable the security edge service without increasing the cost of service for all of our accounts. Apparently it costs more to not molest DNS traffic leaving your network. They can temporarily disable it, but they said it will turn back on when the modem is rebooted. It seems to only affect TCP and UDP port 53. I fixed it by setting all of our routers to use DoH and DoT exclusively. They can't intercept and molest that traffic. -A On Tue, Aug 23, 2022, 05:39 Michael Brown mailto:mich...@supermathie.net>> wrote: If anyone from Comcast Xfinity is on this list, can you please reach out to me? We're getting increased reports of xFi Advanced Security customers being unable to access hosted sites and attempting to open tickets has had no success. Thanks, Michael Brown
RE: Looking for contact within Comcast Xfinity
Michael, Please contact me off-list and I'll see if I can be of any help. -- Alex Brotman Sr. Engineer, Anti-Abuse & Messaging Policy Comcast > -Original Message- > From: NANOG On > Behalf Of Michael Brown > Sent: Monday, August 22, 2022 4:18 PM > To: North American Network Operators' Group > Subject: Looking for contact within Comcast Xfinity > > If anyone from Comcast Xfinity is on this list, can you please reach out to > me? > > We're getting increased reports of xFi Advanced Security customers being > unable to access hosted sites and attempting to open tickets has had no > success. > > Thanks, > > Michael Brown