topic Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error in Broadband

ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Wed, 13 Dec 2023 20:55:41 GMT

I posted about this previously but unfortunately it's still an ongoing issue for us. We are still getting this error at multiple websites along with many disconnections.

Each time we've had a disconnection the robot has detected a line fault. So far we have had 3 visits from Openreach and two different master sockets, circuit tests, replaced part of outside wiring connections. Since the last visit today we had no disconnections but the ERR_SSL_BAD_RECORD_MAC_ALERT persists across multiple browsers, windows, android. Firefox doesn't show this error but I've seen a similar secure connection failed error.

I've tried 4 different routers including a second hand draytek router I picked up on eBay - same issue. We also replaced all powerline converters at one OpenReach engineers recommendations.

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Wed, 13 Dec 2023 23:08:06 GMT

So if I've got this right, you have four routers available to experiment with

1) Plusnet Hub 1

2) BT hub

3) DrayTek ? ? ?

4) TP-Link ? ? ?

What are the model numbers of the DrayTek, and the TP-Link ?

Which router is currently connected to the internet ?

Do you have a landline phone plugged in, and does it get used ?

Is the router plugged in to the master socket DSL outlet using a short cable ?

Is there any telephone extension wiring from the master socket to other slave sockets in your house ?

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Dan_the_Van — Thu, 14 Dec 2023 08:10:35 GMT

@batesi

This might be helpful?

https://www.ssldragon.com/how-to/fix-ssl-errors/fix-err-ssl-bad-record-mac-alert/

If that link doesn't work then try a search on "ERR_SSL_BAD_RECORD_MAC_ALERT"

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Thu, 14 Dec 2023 10:38:40 GMT

Because of the errors/slowness I get its actually tough to post on this forum - its taking forever to load!

My kids would say this is "laggy"

Failed to load resource: net::ERR_HTTP2_PING_FAILED - these errors appear in chrome dev console.

Actually 5 Routers/Hubs in total

1) Plusnet Hub 1

2) BT hub - smart hub type A

3) DrayTek - Vigor 2760

4) Sagecom 2704n

TP-Link - Archer C80 AC1900 - no modem used as Wifi Access point as Plusnet hub wifi is inadequate. Its connected via ethernet cable direct to the plusnet hub (acting as modem).

Which router is currently connected to the internet ? Plusnet (as a modem) uplink to Tplink

Do you have a landline phone plugged in, and does it get used ? I've unplugged it and it makes no difference. In fact its been unplugged most of the last week.

Is the router plugged in to the master socket DSL outlet using a short cable ? Yes - also the master socket is a new one with integrated filter - i.e. Openreach supplied. Its got a separate phone and modem socket.

Is there any telephone extension wiring from the master socket to other slave sockets in your house ? No they've all been disconnected since the first engineer visited.

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

jab1 — Thu, 14 Dec 2023 10:43:50 GMT

What computer/ laptop are you using, how old is it and what operating system/browser?

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Dan_the_Van — Thu, 14 Dec 2023 11:01:14 GMT

@batesi

For your devices are all the operating systems and applications up to date?

Turning off DHCP or Wireless does not make the Hub One act as a modem, it still has an active router. Any router connected to the Hub should be connected in Wireless Access Mode.

On the Hub, navigate from the Home Screen to Troubleshooting > Helpdesk and post a screen shot, make sure you redact your broadband username. This will detail you broadband connection speed and line stats

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 11:22:31 GMT

Post deleted ! - I had assumed that a Hub 1 can be put in 'bridge' mode, but apparently can't !

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Thu, 14 Dec 2023 11:18:46 GMT

Problems on multiple browsers/laptops/phones:

Work laptop Dell Precision 7750 - Windows 10 Enterprise - 2yrs old, Chrome, Firefox, Edge
HP Spectre 360 - Window 11 - 2 yrs old, Chrome
Pixel 6 pro - Android 14 - Chrome, Firefox, Kiwi etc
Nokia 8 - Android 9?
iPhone 13 mini - Safari - my wife reports slowness and problems

I've tried plugging the Dell direct into the Plusnet hub - same errors. I can try this again but not till later! HP has no ethernet port so would need a USB 3 adapter to try that.

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Thu, 14 Dec 2023 11:25:11 GMT

see other posts

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 12:07:28 GMT

What firmware does the DrayTek Vigor 2760 have installed ?

I'm thinking that this modem/router does support 'bridge' mode (i.e. the routing features are bypassed), and from the kit you have to hand is probably the best candidate to be configured as a simple modem, with a view to using that in place of your Hub 1, and use the TP-Link as your router+WiFi

I suspect the likely reason for your various SSL errors will be "Double NAT" caused by having two routers wired in series.

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Thu, 14 Dec 2023 12:32:29 GMT

What firmware does the DrayTek Vigor 2760 have installed ?

Its got the latest firmware available but not its end of life so no firmware past late 2022. 3.8.9.6 BT

The reason I'm not using it now it as suspected it was causing instability (or not improving things)

TP-Link is configured as Access Point - according to all documentation this setup should work with any modem/router.

I suspect the likely reason for your various SSL errors will be "Double NAT" caused by having two routers wired in series.

I disagree:

same issues plugging straight into the Plusnet hub (or whatever modem / router I use) if I disconnect the TP lInk.
same errors if I switch back to Plusnet wifi and use it as supplied (or if I connect direct to ethernet - given I can only do this with Dell Laptop).
same errors connected directly to draytek, bt or sagecom 2704 router.

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 12:50:22 GMT

OK, with the additional info about your setup, I don't disagree with your replies.

Since the engineer visit yesterday, would you say that your ADSL line is stable ?

Can you post the Hub 1 ADSL line stats, as requested in Reply #6 -

@Dan_the_Van wrote:

On the Hub, navigate from the Home Screen to Troubleshooting > Helpdesk and post a screen shot, make sure you redact your broadband username. This will detail your broadband connection speed and line stats

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Dan_the_Van — Thu, 14 Dec 2023 13:17:22 GMT

Have you at some point used the Pixel 6 as a mobile data hotspot and connect your two PC to that? If you have, does the reported issue go away?

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Thu, 14 Dec 2023 13:30:19 GMT

Yes I do that - it's the only way I can do my job when my connection is bad.... I'm a software developer. I tend to use my work iPhone as a hotspot

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 13:34:16 GMT

As some of the online solutions for ERR_SSL_BAD_RECORD_MAC_ALERT suggest that sometimes it is due to a misconfigured MTU,

Can you test your connection using this tool - SpeedGuide : TCP Analyser

and then copy/paste the results from the subsequent "Share Your Results" box

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

batesi — Thu, 14 Dec 2023 13:40:05 GMT

« SpeedGuide.net TCP Analyzer Results »
Tested on: 2023.12.14 08:38
IP address: 212.159.xxx.xxx
Client OS/browser: Android (Chrome 120.0.0.0)

TCP options string: 020405b40402080a433d0cf90000000001030308
MSS: 1460
MTU: 1500
TCP Window: 65536 (not multiple of MSS)
RWIN Scaling: 8 bits (2^8=256)
Unscaled RWIN : 256
Recommended RWINs: 64240, 128480, 256960, 513920, 1027840
BDP limit (200ms): 2621 kbps (262 Kilobytes/s)
BDP limit (500ms): 1049 kbps (105 Kilobytes/s)
MTU Discovery: ON
TTL: 50
Timestamps: ON
SACKs: ON
IP ToS: 00000000 (0)

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 13:44:06 GMT

That MTU looks normal.

Also your IP address 212.159.xxx.xxx - I believe is a static WAN address which is another good point.

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 14:01:58 GMT

Assuming that your ADSL line stats are currently anything like as good as they were here

the only thing remaining I can think of to test is whether your connection has terrible latency, and consequently dropping so many outgoing data packets that it is causing sequences of SSL packets to get interrupted.

On a WIRED connection, AND for a couple of minutes when NOBODY is actively using your broadband,

can you post a screenshot of the "BUFFERBLOAT GRADE", "LATENCY" and "SPEED" results you get from this test - https://www.waveform.com/tools/bufferbloat

On ADSL2+, you should be able to achieve a "B" or better

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Dan_the_Van — Thu, 14 Dec 2023 14:15:23 GMT

@Anonymous

Quick note the Hub One does not have any QOS setting,

Re: ADSL ERR_SSL_BAD_RECORD_MAC_ALERT error

Anonymous — Thu, 14 Dec 2023 14:34:58 GMT

Thanks Dan, yes I had assumed that, BUT I've checked and the TP-Link does have QoS when used in 'router' mode rather than 'Wireless Access Point" mode.

If the resulting bufferbloat is a disastrous "F", my suggestion would be use the TP-Link as a router (with QoS enabled), and come up with a better solution for a modem, either by bridging the DrayTek, or suggesting getting an eBay Vigor 130, or a Billion 7800 or 8800 of some description that can be bridged.