[49649] in North American Network Operators' Group
Bogus bogon?
daemon@ATHENA.MIT.EDU (David Luyer)
Mon Jul 8 10:39:54 2002
From: "David Luyer" <david@luyer.net>
To: <robt@cymru.com>
Cc: <nanog@merit.edu>
Date: Tue, 9 Jul 2002 00:37:30 +1000
Errors-To: owner-nanog-outgoing@merit.edu
Something looks wrong here:
; host ns.eu.sun.com
ns.eu.sun.com A 192.18.1.3
; wget -q -O- http://www.cymru.com/Documents/bogon-dd.html | grep '192.18'
<B>192.18.0.0 255.254.0.0</B><BR>
<B>192.18.0.0 255.254.0.0</B><BR>
<B>192.18.0.0 0.1.255.255</B><BR>
<B>192.18.0.0 0.1.255.255</B><BR>
The bogon list references rfc2455 as mentioning 192.18.0.0/15, however the
subnet is never referenced in it. In fact, no IP addresses appear to be
in rfc2455, and the network seems to be a perfectly legitimate block
containing two /16's (Sun, Agere) and one /24 more-specific in Sun's /16
block (mrc-apu.cam.ac.uk).
Rob? An experiment in social engineering? :-)
David.
