[40657] in North American Network Operators' Group
Re: www.icann.org changed IP address to a reserved block?
daemon@ATHENA.MIT.EDU (Dani Roisman)
Thu Aug 16 11:56:41 2001
Date: Thu, 16 Aug 2001 08:56:04 -0700
From: Dani Roisman <dani@roisman.com>
To: Matt Levine <matt@deliver3.com>
Cc: nanog@merit.edu
Message-ID: <20010816085604.A23561@inet1.roisman.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <000101c125ee$77a0de00$6401a8c0@m00se>; from Matt Levine on Wed, Aug 15, 2001 at 08:57:46PM -0400
Errors-To: owner-nanog-outgoing@merit.edu
10 out of 13 root nameservers, huh?
Granted there are 2 root servers in my named.cache file... but no current root servers
are in 192.0.0.0/16.
$ dig ns .
<snip>
L.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.32.64.12
M.ROOT-SERVERS.NET. 1d15h15m20s IN A 202.12.27.33
I.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.36.148.17
E.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.203.230.10
D.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.8.10.90
A.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.41.0.4
H.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.63.2.53
C.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.33.4.12
G.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.112.36.4
F.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.5.5.241
B.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.9.0.107
J.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.41.0.10
K.ROOT-SERVERS.NET. 1d15h15m20s IN A 193.0.14.129
$ dig ns com.
<snip>
D.GTLD-SERVERS.NET. 15h15m55s IN A 192.31.80.30
L.GTLD-SERVERS.NET. 15h15m55s IN A 192.41.162.30
F.GTLD-SERVERS.NET. 15h15m55s IN A 192.35.51.30
J.GTLD-SERVERS.NET. 15h15m55s IN A 210.132.100.101
K.GTLD-SERVERS.NET. 15h15m55s IN A 213.177.194.5
E.GTLD-SERVERS.NET. 15h15m55s IN A 192.12.94.30
M.GTLD-SERVERS.NET. 15h15m55s IN A 202.153.114.101
A.GTLD-SERVERS.NET. 15h15m55s IN A 192.5.6.30
G.GTLD-SERVERS.NET. 15h15m55s IN A 192.42.93.30
H.GTLD-SERVERS.NET. 15h15m55s IN A 192.54.112.30
C.GTLD-SERVERS.NET. 15h15m55s IN A 192.26.92.30
I.GTLD-SERVERS.NET. 15h15m55s IN A 192.36.144.133
Either way, I'll modify my filters to be a bit more granular in 192.0.0.0/16. Thanks to others for the good pointers.
- Dani
On Wed, Aug 15, 2001 at 08:57:46PM -0400, Matt Levine wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> You want to be filtering 192.168.0.0/16, as right now you're blocking
> not only the icann website, but (among others), but 10 out of 13 of
> the root nameservers..
>
>
> Regards,
> Matt
>
> - --
> Matt Levine
> @Home: matt@deliver3.com
> @Work: matt@easynews.com
> ICQ : 17080004
> PGP : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6C0D04CF
>
> - -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf
> Of Dani Roisman
> Sent: Wednesday, August 15, 2001 8:24 PM
> To: nanog@merit.edu
> Subject: www.icann.org changed IP address to a reserved block?
>
>
>
> I just recently noticed that we cannot get to www.icann.org.
> Granted, it's been a few weeks since I last tried.
>
> I'm seeing: www.icann.org has address 192.0.34.65, but have been
> filtering 192.0.0.0/16 le 32 from BGP updates for the longest time.
>
> ARIN shows:
> (RESERVED-2) RESERVED-192 192.0.0.0 -
> 192.0.255.255
> ICANN
> c/o Internet Assigned Numbers Authority (NET-ICANN) ICANN
> 192.0.32.0 -
> 192.0.47.255
>
> I thought RESERVED meant not in use on the public Internet? I guess
> in the mean time, I'm gonna drop the 192.0.0.0/16 le 32 filter.
>
> - - Dani
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
>
> iQA/AwUBO3saisp0j1NsDQTPEQK8KgCgojkKj9ZW9iKHj6tzGgrnTe5BdVIAn3lf
> D/0opS9pbQdHhOh/qCsDzSdy
> =ruJG
> -----END PGP SIGNATURE-----
>