--- type: client name: darrell-delphen display_name: Darrell Delphen last_compiled: 2026-06-18 compiled_by: GURU-5070/claude-main sources: - clients/darrell-delphen/session-logs/2026-06/2026-06-18-mike-email-link-sni-block.md backlinks: [] --- # Darrell Delphen ## Profile - **Contract type:** Break-fix (no prepaid block) - **Key contacts:** Darrell Delphen - **Billing rate:** $150/hr remote (most recent labor) - **Location:** Yantis, TX - **Syncro customer ID:** 35996725 - **Managed devices:** GuruRMM agent on DDDOffice072023 (0 assets recorded in Syncro) ## Infrastructure ### Servers & Services | Host | IP | Role | OS | Notes | |---|---|---|---|---| | DDDOffice072023 | LAN behind 192.168.1.1 | Workstation | Windows | GuruRMM agent `000ed57d-fd05-4001-871c-244f43155c16` (v0.6.66); ISP egress 167.89.210.225 | ### Email & Identity - **Mail security:** Intermedia Email Protection (rewrites links to `url.emailprotection.link`). Mailbox accessed via Outlook. (verify tenant/host details) ### Network - **ISP / WAN:** ISP-provided/managed **Extreme EXOS** gateway (LAN gateway 192.168.1.1, egress 167.89.210.225). Client has no login to this device — changes require ISP escalation. - **Firewall:** the EXOS gateway runs ISP-side web/URL filtering (the "NetIQ" feature) capable of SNI-based TLS inspection. - **VPN:** (verify — none known) ## Access - Remote management: GuruRMM (agent on DDDOffice072023) - Vault path: (verify — no client credentials vaulted) ## Patterns & Known Issues - **ISP gateway SNI filtering breaks Intermedia/Outlook email links.** The ISP-managed Extreme EXOS gateway's "NetIQ" URL-filtering feature has SNI-intercepted and reset TLS to `url.emailprotection.link` (Intermedia's link-rewriter), producing `ERR_CONNECTION_ABORTED` / SChannel `0x80090326` (SEC_E_ILLEGAL_MESSAGE) on Outlook links while Gmail links (Google redirector) worked. The client cannot change this device — resolution requires an ISP ticket. If it recurs, suspect the "NetIQ" feature being re-enabled and confirm with an SNI-varied handshake test against `199.193.205.140`. ## Active Work *No open tickets in Syncro as of 2026-06-18.* ## History Highlights - **2026-06-18** — Diagnosed Outlook email links failing (`ERR_CONNECTION_ABORTED`). Root cause: ISP EXOS gateway "NetIQ" feature SNI-blocking Intermedia's `url.emailprotection.link` rewriter. Deployed Cloudflare WARP as interim bypass; ISP disabled the feature for the permanent fix; verified native path and removed WARP. Billed 1.0h remote ($150, Syncro #32437 / invoice #67853). ## Backlinks *(none yet)*