[120095] in North American Network Operators' Group
Re: Breaking the internet (hotels, guestnet style)
daemon@ATHENA.MIT.EDU (Stephen Sprunk)
Wed Dec 9 13:42:51 2009
Date: Wed, 09 Dec 2009 12:41:54 -0600
From: Stephen Sprunk <stephen@sprunk.org>
To: Jens Link <lists@quux.de>,
North American Noise and Off-topic Gripes <nanog@merit.edu>
In-Reply-To: <87ws0wcxbp.fsf@laphroiag.quux.de>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
This is a cryptographically signed message in MIME format.
--------------ms000307070103030001090405
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Jens Link wrote:
> Owen DeLong <owen@delong.com> writes:
>
>> I expect my connections to my mail server to actually reach my mail server. I use TLS and SMTP AUTH as well as IMAP/SSL. Many of the "just works" settings in question break these things badly.
>>
>
> One of my customers has an appliance for his WLAN guest access access
> which filters out AAAA records. :-(
>
> jens@bowmore:~$ dig AAAA www.quux.de @8.8.8.8 +short
> jens@bowmore:~$
>
That, unfortunately, is not uncommon. Actually, it's one of the _less_
broken systems I've seen, since IPv4 presumably keeps working.
One major vendor of hotel guestnet equipment returns an A record for
0.0.0.1 if you do an ANY or AAAA query for any hostname--even ones that
don't exist. At least with WinXP, you have to disable IPv6 just to get
IPv4 to work! Worse, their tech support sees nothing wrong with this;
if you disagree, all they'll do is offer a refund. Unfortunately, "take
your money elsewhere" doesn't work when you've already paid for the
hotel room--and they know it.
S
--
Stephen Sprunk "God does not play dice." --Albert Einstein
CCIE #3723 "God is an inveterate gambler, and He throws the
K5SSS dice at every possible opportunity." --Stephen Hawking
--------------ms000307070103030001090405
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms000307070103030001090405--