[30237] in North American Network Operators' Group
Re: someone RBL'd a reserveD-8 number from IANA
daemon@ATHENA.MIT.EDU (Richard A. Steenbergen)
Thu Jul 20 11:04:03 2000
Date: Thu, 20 Jul 2000 10:59:21 -0400 (EDT)
From: "Richard A. Steenbergen" <ras@e-gerbil.net>
To: "Henry R. Linneweh" <linneweh@concentric.net>
Cc: nanog <nanog@merit.edu>
Message-ID: <Pine.BSF.4.21.0007201057550.47520-100000@overlord.e-gerbil.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Thu, 20 Jul 2000, Henry R. Linneweh wrote:
> 98.100.32.32
>
> traceroute to 98.100.32.32 (98.100.32.32): 1-30 hops, 38 byte packets
> 1 main.bungi.com (207.126.97.9) 2.15 ms 1.73 ms 1.86 ms
> 2 above-gw2.above.net (207.126.96.217) 4.41 ms 4.88 ms 3.67 ms
> 3 core5-main2-oc3.sjc.above.net (216.200.0.205) 3.62 ms 4.56 ms 7.53 ms
> 4 core3-core5-oc48.sjc2.above.net (208.184.102.206) 6.34 ms 5.7 ms 5.3 ms
> 5 iad-sjc2-oc48.iad.above.net (216.200.127.25) 73.0 ms 79.7 ms 72.6 ms
> 6 that.address.is.on.the.rbl.see.www.mail-abuse.org.for.more.information.above.net (208.185.0.26) 72.7 ms 73.6 ms 105 ms
> 7 * * *
RBL lists everything you shouldn't be getting packets from, including
reserved IANA-reserved IP space, and AboveNet subscribes to a full BGP
feed. If you could null route based on source using this information it
would actually be a pretty effective method of maintaining a network wide
filter setup with little to no maintenence. :P
--
Richard A Steenbergen <ras@e-gerbil.net> http://www.e-gerbil.net/humble
PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)
