[16257] in North American Network Operators' Group
Re: Private routes advertised
daemon@ATHENA.MIT.EDU (Phil Howard)
Thu Apr 16 17:55:56 1998
From: Phil Howard <phil@charon.milepost.com>
To: administrator@lamere.net
Date: Thu, 16 Apr 1998 16:45:32 -0500 (CDT)
Cc: nanog@merit.edu
In-Reply-To: <199804161424.KAA32079@dns1.lamere.net> from "administrator@lamere.net" at Apr 16, 98 10:16:20 am
administrator@lamere.net put forth in cyber chatter:
> Hello,
> alter.net is advertising private routes 192.168.nnn.nnn. who do I
> contact to get that shutdown?
>
> Here is the traceroute on it.
>
> [C:\]tracerte 192.168.2.5
> 0 lamere-r1.lamere.net (206.249.60.1) 8 ms 8 ms 0 ms
> 1 lamere-r1.lamere.net (206.249.60.1) 0 ms 0 ms 0 ms
> 2 206.249.57.241 (206.249.57.241) 8 ms 0 ms 0 ms
> 3 loki.wordwrap.net (206.249.56.1) 0 ms 7 ms 0 ms
> 4 bbr2-s401-wordwrap.ctel.net (208.221.76.165) 8 ms 203 ms 180 ms
> 5 905.Hssi2-0.GW1.BOS1.ALTER.NET (157.130.4.25) 31 ms 156 ms 234
> ms
> 6 123.ATM2-0-0.XR2.BOS1.ALTER.NET (146.188.176.238) 8 ms 24 ms 15
> ms
> 7 190.ATM10-0-0.XR2.EWR1.ALTER.NET (146.188.176.153) 32 ms 85 ms
> 32 ms
> 8 100.ATM10-0-0.TR2.EWR1.ALTER.NET (146.188.176.90) 39 ms 31 ms
> 23 ms
> 9 105.ATM6-0.TR2.DCA1.ALTER.NET (146.188.136.189) 24 ms 23 ms 24
> ms 10 198.ATM8-0-0.XR2.TCO1.ALTER.NET (146.188.161.185) 32 ms 23 ms
> 24 ms 11 192.ATM1-0-0.GW2.TCO1.ALTER.NET (146.188.160.53) 31 ms 32
> ms 23 ms 12 quantum-gw.customer.alter.net (157.130.34.170) 31 ms
> 31 ms 39 ms 13 192.168.4.1 (192.168.4.1) 86 ms * 93 ms
> 14 192.168.10.2 (192.168.10.2) 94 ms 94 ms 93 ms
> 15 192.168.11.23 (192.168.11.23) 94 ms 86 ms 125 ms
> 16 192.168.2.5 (192.168.2.5) 93 ms *
>
> Curtis
That looks to me like alter.net is doing this just within their own
network. If ctel.net is a customer of theirs, and and wordwrap is
a customer of ctel, maybe much of this, if not all of this, is non-BGP
and just default routed.
There's technically nothing wrong with routing private numbers within you
own net and offering that to your customers. I just tried to traceroute
to those numbers from my MCI connection and it went into the MCI router
and died.
Is the existance of these routes causing you a problem? Are you using BGP?
Can you filter the routes and packets in your access lists?
--
Phil Howard | stop8701@spam5mer.com die9spam@anyplace.org suck1it1@anyplace.edu
phil | end3it33@no0where.com crash539@anyplace.edu die9spam@anyplace.org
at | stop4ads@anyplace.edu end9ads5@noplace7.net stop5376@spammer2.org
milepost | no6spam8@no5where.net eat1this@no5place.edu no4way55@noplace8.edu
dot | end5it41@spammer6.edu die8spam@no6where.org stop1313@no7place.net
com | a8b9c4d4@no85ads4.org blow2me5@spam2mer.com ads8suck@no0where.edu
