www.icann.org changed IP address to a reserved block?
I just recently noticed that we cannot get to www.icann.org. Granted, it's been a few weeks since I last tried. I'm seeing: www.icann.org has address 192.0.34.65, but have been filtering 192.0.0.0/16 le 32 from BGP updates for the longest time. ARIN shows: (RESERVED-2) RESERVED-192 192.0.0.0 - 192.0.255.255 ICANN c/o Internet Assigned Numbers Authority (NET-ICANN) ICANN 192.0.32.0 - 192.0.47.255 I thought RESERVED meant not in use on the public Internet? I guess in the mean time, I'm gonna drop the 192.0.0.0/16 le 32 filter. - Dani
Um, you really probably only want to filter 192.168.0.0/16...may wanna go look at rfc 1918 as well...t On Wed, 15 Aug 2001, Dani Roisman wrote:
I just recently noticed that we cannot get to www.icann.org. Granted, it's been a few weeks since I last tried.
I'm seeing: www.icann.org has address 192.0.34.65, but have been filtering 192.0.0.0/16 le 32 from BGP updates for the longest time.
ARIN shows: (RESERVED-2) RESERVED-192 192.0.0.0 - 192.0.255.255 ICANN c/o Internet Assigned Numbers Authority (NET-ICANN) ICANN 192.0.32.0 - 192.0.47.255
I thought RESERVED meant not in use on the public Internet? I guess in the mean time, I'm gonna drop the 192.0.0.0/16 le 32 filter.
- Dani
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You want to be filtering 192.168.0.0/16, as right now you're blocking not only the icann website, but (among others), but 10 out of 13 of the root nameservers.. Regards, Matt - -- Matt Levine @Home: matt@deliver3.com @Work: matt@easynews.com ICQ : 17080004 PGP : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6C0D04CF - -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Dani Roisman Sent: Wednesday, August 15, 2001 8:24 PM To: nanog@merit.edu Subject: www.icann.org changed IP address to a reserved block? I just recently noticed that we cannot get to www.icann.org. Granted, it's been a few weeks since I last tried. I'm seeing: www.icann.org has address 192.0.34.65, but have been filtering 192.0.0.0/16 le 32 from BGP updates for the longest time. ARIN shows: (RESERVED-2) RESERVED-192 192.0.0.0 - 192.0.255.255 ICANN c/o Internet Assigned Numbers Authority (NET-ICANN) ICANN 192.0.32.0 - 192.0.47.255 I thought RESERVED meant not in use on the public Internet? I guess in the mean time, I'm gonna drop the 192.0.0.0/16 le 32 filter. - - Dani -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBO3saisp0j1NsDQTPEQK8KgCgojkKj9ZW9iKHj6tzGgrnTe5BdVIAn3lf D/0opS9pbQdHhOh/qCsDzSdy =ruJG -----END PGP SIGNATURE-----
10 out of 13 root nameservers, huh? Granted there are 2 root servers in my named.cache file... but no current root servers are in 192.0.0.0/16. $ dig ns . <snip> L.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.32.64.12 M.ROOT-SERVERS.NET. 1d15h15m20s IN A 202.12.27.33 I.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.36.148.17 E.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.203.230.10 D.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.8.10.90 A.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.41.0.4 H.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.63.2.53 C.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.33.4.12 G.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.112.36.4 F.ROOT-SERVERS.NET. 1d15h15m20s IN A 192.5.5.241 B.ROOT-SERVERS.NET. 1d15h15m20s IN A 128.9.0.107 J.ROOT-SERVERS.NET. 1d15h15m20s IN A 198.41.0.10 K.ROOT-SERVERS.NET. 1d15h15m20s IN A 193.0.14.129 $ dig ns com. <snip> D.GTLD-SERVERS.NET. 15h15m55s IN A 192.31.80.30 L.GTLD-SERVERS.NET. 15h15m55s IN A 192.41.162.30 F.GTLD-SERVERS.NET. 15h15m55s IN A 192.35.51.30 J.GTLD-SERVERS.NET. 15h15m55s IN A 210.132.100.101 K.GTLD-SERVERS.NET. 15h15m55s IN A 213.177.194.5 E.GTLD-SERVERS.NET. 15h15m55s IN A 192.12.94.30 M.GTLD-SERVERS.NET. 15h15m55s IN A 202.153.114.101 A.GTLD-SERVERS.NET. 15h15m55s IN A 192.5.6.30 G.GTLD-SERVERS.NET. 15h15m55s IN A 192.42.93.30 H.GTLD-SERVERS.NET. 15h15m55s IN A 192.54.112.30 C.GTLD-SERVERS.NET. 15h15m55s IN A 192.26.92.30 I.GTLD-SERVERS.NET. 15h15m55s IN A 192.36.144.133 Either way, I'll modify my filters to be a bit more granular in 192.0.0.0/16. Thanks to others for the good pointers. - Dani On Wed, Aug 15, 2001 at 08:57:46PM -0400, Matt Levine wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
You want to be filtering 192.168.0.0/16, as right now you're blocking not only the icann website, but (among others), but 10 out of 13 of the root nameservers..
Regards, Matt
- -- Matt Levine @Home: matt@deliver3.com @Work: matt@easynews.com ICQ : 17080004 PGP : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6C0D04CF
- -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Dani Roisman Sent: Wednesday, August 15, 2001 8:24 PM To: nanog@merit.edu Subject: www.icann.org changed IP address to a reserved block?
I just recently noticed that we cannot get to www.icann.org. Granted, it's been a few weeks since I last tried.
I'm seeing: www.icann.org has address 192.0.34.65, but have been filtering 192.0.0.0/16 le 32 from BGP updates for the longest time.
ARIN shows: (RESERVED-2) RESERVED-192 192.0.0.0 - 192.0.255.255 ICANN c/o Internet Assigned Numbers Authority (NET-ICANN) ICANN 192.0.32.0 - 192.0.47.255
I thought RESERVED meant not in use on the public Internet? I guess in the mean time, I'm gonna drop the 192.0.0.0/16 le 32 filter.
- - Dani
-----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
iQA/AwUBO3saisp0j1NsDQTPEQK8KgCgojkKj9ZW9iKHj6tzGgrnTe5BdVIAn3lf D/0opS9pbQdHhOh/qCsDzSdy =ruJG -----END PGP SIGNATURE-----
participants (3)
-
Dani Roisman -
Matt Levine -
Todd Suiter