Files
claudetools/wiki/clients/darrell-delphen.md

56 lines
2.5 KiB
Markdown

---
type: client
name: darrell-delphen
display_name: Darrell Delphen
last_compiled: 2026-06-18
compiled_by: GURU-5070/claude-main
sources:
- clients/darrell-delphen/session-logs/2026-06/2026-06-18-mike-email-link-sni-block.md
backlinks: []
---
# Darrell Delphen
## Profile
- **Contract type:** Break-fix (no prepaid block)
- **Key contacts:** Darrell Delphen
- **Billing rate:** $150/hr remote (most recent labor)
- **Location:** Yantis, TX
- **Syncro customer ID:** 35996725
- **Managed devices:** GuruRMM agent on DDDOffice072023 (0 assets recorded in Syncro)
## Infrastructure
### Servers & Services
| Host | IP | Role | OS | Notes |
|---|---|---|---|---|
| DDDOffice072023 | LAN behind 192.168.1.1 | Workstation | Windows | GuruRMM agent `000ed57d-fd05-4001-871c-244f43155c16` (v0.6.66); ISP egress 167.89.210.225 |
### Email & Identity
- **Mail security:** Intermedia Email Protection (rewrites links to `url.emailprotection.link`). Mailbox accessed via Outlook. (verify tenant/host details)
### Network
- **ISP / WAN:** ISP-provided/managed **Extreme EXOS** gateway (LAN gateway 192.168.1.1, egress 167.89.210.225). Client has no login to this device — changes require ISP escalation.
- **Firewall:** the EXOS gateway runs ISP-side web/URL filtering (the "NetIQ" feature) capable of SNI-based TLS inspection.
- **VPN:** (verify — none known)
## Access
- Remote management: GuruRMM (agent on DDDOffice072023)
- Vault path: (verify — no client credentials vaulted)
## Patterns & Known Issues
- **ISP gateway SNI filtering breaks Intermedia/Outlook email links.** The ISP-managed Extreme EXOS gateway's "NetIQ" URL-filtering feature has SNI-intercepted and reset TLS to `url.emailprotection.link` (Intermedia's link-rewriter), producing `ERR_CONNECTION_ABORTED` / SChannel `0x80090326` (SEC_E_ILLEGAL_MESSAGE) on Outlook links while Gmail links (Google redirector) worked. The client cannot change this device — resolution requires an ISP ticket. If it recurs, suspect the "NetIQ" feature being re-enabled and confirm with an SNI-varied handshake test against `199.193.205.140`.
## Active Work
*No open tickets in Syncro as of 2026-06-18.*
## History Highlights
- **2026-06-18** — Diagnosed Outlook email links failing (`ERR_CONNECTION_ABORTED`). Root cause: ISP EXOS gateway "NetIQ" feature SNI-blocking Intermedia's `url.emailprotection.link` rewriter. Deployed Cloudflare WARP as interim bypass; ISP disabled the feature for the permanent fix; verified native path and removed WARP. Billed 1.0h remote ($150, Syncro #32437 / invoice #67853).
## Backlinks
*(none yet)*