[20489] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Maybe I'm misreading this but...

daemon@ATHENA.MIT.EDU (Jon Lewis)
Wed Oct 14 17:58:44 1998

Date: Wed, 14 Oct 1998 17:57:21 -0400 (EDT)
From: Jon Lewis <jlewis@inorganic5.fdt.net>
To: Barry Shein <bzs@world.std.com>
cc: nanog@merit.edu
In-Reply-To: <199810142111.AA19795@world.std.com>

On Wed, 14 Oct 1998, Barry Shein wrote:

> The following traceroute seems to indicate, according to ARIN, that
> someone is running routers for spammers in the IANA Reserved netspace?

Nope.

> > 8  bs-jackson-gw.customer.alter.net (157.130.65.226)  107 ms  132 ms  96 ms
> > 9  172.17.80.46 (172.17.80.46)  59 ms  53 ms  44 ms
> >10  172.21.210.18 (172.21.210.18)  122 ms  96 ms  49 ms
> >11  209.149.111.17 (209.149.111.17)  53 ms (ttl=118!)  58 ms (ttl=118!)  150 ms (ttl=118!)

Looks to me like BellSouth is using rfc-1918 private IP space for some of
their routers.  Possible reasons are conservation of address space and
that it makes it difficult to directly access these routers from outside
their network.

I have heard of people doing temporary bogus route announcements and
running spam servers from someone else's or unallocated IP space...but I
don't think I've ever seen it first hand.  Sadly, both my upstreams have
really tight BGP filters, so I don't get to play any of these games. :)

------------------------------------------------------------------
 Jon Lewis <jlewis@fdt.net>  |  Spammers will be winnuked or 
 Network Administrator       |  drawn and quartered...whichever
 Florida Digital Turnpike    |  is more convenient.
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____


home help back first fref pref prev next nref lref last post