[67777] in North American Network Operators' Group
Re: routing invalid IP addresses
daemon@ATHENA.MIT.EDU (Laurence F. Sheldon, Jr.)
Sat Feb 21 10:33:43 2004
Date: Sat, 21 Feb 2004 09:33:02 -0600
From: "Laurence F. Sheldon, Jr." <LarrySheldon@cox.net>
To: nanog@merit.edu
In-Reply-To: <010b01c3f878$eaa483c0$231a90d8@NTAUTHORITY>
Errors-To: owner-nanog-outgoing@merit.edu
Geo. wrote:
> We had an attack here last night and the attack traffic was coming from an
> IP address of x.x.255.x which isn't a valid IP address yet the traffic was
> being routed over the internet (as far as I can tell anyway). When I
> attempted to track down the source I found our cisco routers wouldn't accept
> the address as valid so it was not possible to null route or trace the
> traffic.
>
> Has anyone else ever seen this before? Clue me in?
Invalid? Really? I used to manage a small collection of cisco routers
and I don't recall any of them complaining about such an address.
What color is the sky there?
