<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Yes, I own my own modem even though comcast now charges me $5/month more than if I rented their equipment for this privilege.<div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Sep 10, 2021, at 15:49 , Eric Kuhnke <<a href="mailto:eric.kuhnke@gmail.com" class="">eric.kuhnke@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" class="">Ideally being your own customer owned cable modem that meets specs (Comcast does allow this in some regions) that will function as a layer 2 bridge. </div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Sep 10, 2021, 1:46 PM Owen DeLong <<a href="mailto:owen@delong.com" class="">owen@delong.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space" class="">First thing I do with any cable modem is convert it to bridge mode.<div class=""><br class=""></div><div class="">The fewer “smarts” in the cable modem doing odd things to my traffic, the better.</div><div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On Sep 10, 2021, at 10:40 , Eric Kuhnke <<a href="mailto:eric.kuhnke@gmail.com" target="_blank" rel="noreferrer" class="">eric.kuhnke@gmail.com</a>> wrote:</div><br class=""><div class=""><div dir="ltr" class=""><div class="">I know this is not a solution to your problem, but I have found myself more often running the public interface of openvpn systems on port 443. Any sufficiently advanced DPI setup will be able to tell that it's not quite normal https traffic. <br class=""></div><div class=""><br class=""></div><div class="">But 99% of the time it seems to serve the purpose of defeating heavily-restricted "free" wifi in airports, hotels, random guest/amenity wifi stuff, which obviously can't block https/443 to the world these days. </div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Sep 10, 2021 at 11:08 AM Jason Kuehl <<a href="mailto:jason.w.kuehl@gmail.com" target="_blank" rel="noreferrer" class="">jason.w.kuehl@gmail.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr" class="">This is an SSL VPN that is being blocked. This is what failure looks like. Curl is the same.<div class=""><br class=""></div><div class="">Once we disable the Xfi
Advanced Security everyone can connect.<br class=""><div class=""><br class=""></div><div class=""><img alt="image.png" width="562" height="251" class=""><br class=""></div></div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Sep 10, 2021 at 11:01 AM Jim Popovitch via NANOG <<a href="mailto:nanog@nanog.org" target="_blank" rel="noreferrer" class="">nanog@nanog.org</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Fri, 2021-09-10 at 10:31 -0400, Jason Kuehl wrote:<br class="">
> For whatever reason Comcast Xfinity is blocking my VPN URL. <br class="">
<br class="">
Not certain that this applies, but Concast Advanced Security (setup in<br class="">
your Comcast gateway) only allows outbound VPN connections to UDP ports<br class="">
500, 4500, and 62515 and TCP port 1723.<br class="">
<br class="">
-Jim P.<br class="">
<br class="">
</blockquote></div><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div dir="ltr" class="">Sincerely,<br class=""> <br class="">Jason W Kuehl<br class="">Cell 920-419-8983<br class=""><a href="mailto:jason.w.kuehl@gmail.com" target="_blank" rel="noreferrer" class="">jason.w.kuehl@gmail.com</a></div>
</blockquote></div>
</div></blockquote></div><br class=""></div></div></blockquote></div>
</div></blockquote></div><br class=""></div></body></html>