[18155] in North American Network Operators' Group
Re: small vent
daemon@ATHENA.MIT.EDU (Dave Rand)
Sun Jun 28 15:58:01 1998
From: dlr@bungi.com (Dave Rand)
Date: Sun, 28 Jun 1998 12:45:29 PDT
In-Reply-To: Jon Lewis's message on Jun 28, 14:54.
To: Jon Lewis <jlewis@inorganic5.fdt.net>, Mark Milhollan <mlm@ftel.net>
Cc: nanog@merit.edu
[In the message entitled "Re: small vent" on Jun 28, 14:54, Jon Lewis writes:]
> On Sun, 28 Jun 1998, Mark Milhollan wrote:
>
> > "David R. Conrad" writes:
> > >b) someone has dummied up a prefix in a mail header or something (typical)
> > >c) there is a bug in the database software (happens)
> >
> > I doubt B since the IP address queried was that of the TCP peer.
> > Granted it could have been a spoofed session, but that would have
> > required a level of expertise that I've never seen used merely to
> > attempt delivery of a few thousand pieces of e-mail.
>
> What about d). Perhaps someone temporarily announced routes for
> unallocated space, setup a mail/spam server in that IP space, sent out
> their mail, and stopped exporting the route.
>
> Is there a place one can search to see a history of BGP announcements for
> a given route?
This has, in fact, happened before. One of the reasons that the unallocated
spaces are listed on the RBL.
--
Dave Rand
dlr@bungi.com
http://www.bungi.com
