On Wed, 14 Oct 1998, Barry Shein wrote:
The following traceroute seems to indicate, according to ARIN, that someone is running routers for spammers in the IANA Reserved netspace?
Nope.
8 bs-jackson-gw.customer.alter.net (157.130.65.226) 107 ms 132 ms 96 ms 9 172.17.80.46 (172.17.80.46) 59 ms 53 ms 44 ms 10 172.21.210.18 (172.21.210.18) 122 ms 96 ms 49 ms 11 209.149.111.17 (209.149.111.17) 53 ms (ttl=118!) 58 ms (ttl=118!) 150 ms (ttl=118!)
Looks to me like BellSouth is using rfc-1918 private IP space for some of their routers. Possible reasons are conservation of address space and that it makes it difficult to directly access these routers from outside their network. I have heard of people doing temporary bogus route announcements and running spam servers from someone else's or unallocated IP space...but I don't think I've ever seen it first hand. Sadly, both my upstreams have really tight BGP filters, so I don't get to play any of these games. :) ------------------------------------------------------------------ Jon Lewis <jlewis@fdt.net> | Spammers will be winnuked or Network Administrator | drawn and quartered...whichever Florida Digital Turnpike | is more convenient. ______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____