North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Maybe I'm misreading this but...

  • From: Jon Lewis
  • Date: Wed Oct 14 18:05:26 1998

On Wed, 14 Oct 1998, Barry Shein wrote:

> The following traceroute seems to indicate, according to ARIN, that
> someone is running routers for spammers in the IANA Reserved netspace?

Nope.

> > 8  bs-jackson-gw.customer.alter.net (157.130.65.226)  107 ms  132 ms  96 ms
> > 9  172.17.80.46 (172.17.80.46)  59 ms  53 ms  44 ms
> >10  172.21.210.18 (172.21.210.18)  122 ms  96 ms  49 ms
> >11  209.149.111.17 (209.149.111.17)  53 ms (ttl=118!)  58 ms (ttl=118!)  150 ms (ttl=118!)

Looks to me like BellSouth is using rfc-1918 private IP space for some of
their routers.  Possible reasons are conservation of address space and
that it makes it difficult to directly access these routers from outside
their network.

I have heard of people doing temporary bogus route announcements and
running spam servers from someone else's or unallocated IP space...but I
don't think I've ever seen it first hand.  Sadly, both my upstreams have
really tight BGP filters, so I don't get to play any of these games. :)

------------------------------------------------------------------
 Jon Lewis <[email protected]>  |  Spammers will be winnuked or 
 Network Administrator       |  drawn and quartered...whichever
 Florida Digital Turnpike    |  is more convenient.
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____