[182519] in North American Network Operators' Group
Re: 20-30Gbps UDP 1720 traffic appearing to originate from CN in last
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Jul 20 14:57:25 2015
X-Original-To: nanog@nanog.org
To: Colin Johnston <colinj@gt86car.org.uk>
In-Reply-To: Your message of "Mon, 20 Jul 2015 19:42:39 +0100."
<608BFE1E-6FCC-4A58-A184-74EA4BD67182@gt86car.org.uk>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 20 Jul 2015 14:57:18 -0400
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--==_Exmh_1437418638_2215P
Content-Type: text/plain; charset=us-ascii
On Mon, 20 Jul 2015 19:42:39 +0100, Colin Johnston said:
> see below for china ranges I believe, ipv4 and ipv6
You may believe... but are you *sure*? (Over the years, we've seen
*lots* of "block China" lists that accidentally block chunks allocated
to Taiwan or Australia or other Pacific Rim destinations).
And remember - asking the NIC doesn't help, because there are almost
certainly blocks allocated that the registration points to Korea or
someplace, but the provider routes a sub-block to China. And let's
not even get started on blocks allocated by ARIN or RIPE....
(Yes, it *was* a trick question :)
--==_Exmh_1437418638_2215P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Exmh version 2.5 07/13/2001
iQIVAwUBVa1EjgdmEQWDXROgAQJgIA/+PqBXw8S5dKLxFD37Apda6+j7Wl/9sshQ
Eu3oxUnleEWdnNXdQPweulbqCfVTK3RdTq09yHeDvCgjLv9UAHxm/Oam3CP95Le0
/UnHCKj+Y7b/dJSLNpfDk40VyDAvma34cySFzTPHpod02Lo4P0xzKhwhs9vLfEL6
wSPKYn60AgZUdz6Ln1o4xfjgjyEb7Q3B0byii5jUdJXi3Vgs8rBhm6rNVRUvkbou
cBeBT27jMUAv0b+d1yGZE8b0AWgVGCE3lgClo89gVGCjWpGJnZpQUiRjqar0laIX
rZlhVRdh+qV2fiA/pzU0ayWT5CbSqQntW0s2VcQBJEeyJpRHsLXqoyiMOL2pPi5L
QvOU7xxb0ubJP8NGtQ//ZqYe/Wdzv3EaanF4qDC0xmuXRt1v1UppvGPPO3n2crmw
Qii0fMCSeeTJQ7GfZ/vE1idg/9lzvrjohCaS5ZPrpFC6HUNmFGD9ifEucHdtWv2P
BYjLkuqHMAuQYJdxKv3V9Uh4CxGA5rQhLI+WqCEtTASBFBe37SS3Dfdz/+e/X8sH
uz9Vqq9uwWeUmOpbKlRafLy8jwIRPgzEl8g19easkSMX2CzBhKgJyvUB87Df+S3Z
TFUmLVKX+zFD4rsofnHbbQYbJrkWsJJToFCbsM3TTvipzFPjOBPEuKYl4qdxhS0Q
En667Gp6C/M=
=hFsU
-----END PGP SIGNATURE-----
--==_Exmh_1437418638_2215P--