EP.NET 198.32.0.0/16 assignments and bogon filters
Since I've just run into the second of these in as many weeks, I thought this was perhaps worth a mail to the list. EP.NET assign netblocks from 198.32/16 to various Internet infrastructure providers, including exchange points and prominent (e.g. ccTLD) nameservers. And maybe other things, for all I know, ask Bill, but definitely not just for exchange points. I realise that answers from the usual whois servers in response to questions within this netblock may not make this obvious. Many ISPs have import policies which reject exchange point blocks from external peers, for which there are many fine and logical arguments. Several of those ISPs reject "198.32.0.0/16 le 24" as part of that policy, however, believing that 198.32.0.0/16 is only used for exchange point assignments. 198.32.0.0/16 is used for other things, too. Not just exchange points. People who need to block exchange point blocks in their import policy would do well to enumerate the specific subnets of 198.32.0.0/16 which are used at exchange points they connect to, rather than denying all routes covered by the /16. Examples of nameservers that fall victim to over-zealous filtering of 198.32/16 assignments are as follows (these are just those present as glue in the root zone): [jabley@halibut]% dig @192.5.5.241 . axfr | grep 198.32 NS1.DNS.AQ. 172800 IN A 198.32.71.12 MZIZI.KENIC.OR.KE. 172800 IN A 198.32.67.9 FLAG.EP.NET. 172800 IN A 198.32.4.13 L.ROOT-SERVERS.NET. 3600000 IN A 198.32.64.12 NS1.2DAY.CO.NZ. 172800 IN A 198.32.66.12 [jabley@halibut]% If you can't traceroute to those nameservers, it would be great if you could patch up your import filters so that they become reachable to your users and customers. [ISC doesn't use any EP.NET netblocks, but we have friends who do.]
On Sun, Jul 10, 2005 at 09:56:38PM -0400, Joe Abley wrote:
Since I've just run into the second of these in as many weeks, I thought this was perhaps worth a mail to the list.
Many ISPs have import policies which reject exchange point blocks from external peers, for which there are many fine and logical arguments. Several of those ISPs reject "198.32.0.0/16 le 24" as part of that policy, however, believing that 198.32.0.0/16 is only used for exchange point assignments.
thank you joe. since trying to dictate transit policy is bad, i've only ever told people about peering... this statement may help. Note that the use of a proxy-aggregate to filter is just as bad or worse than a proxy-aggregate to announce. http://www.ep.net/policy.html Our statement regarding the injection of EP.NET address space into a routing system. "anyone who has a properly delegated /32 address delegated/assigned from a /24 within 198.32.0.0/16 may announce that /24 to their peers. This is also true in IPv6 space in that anyone with a properly delegated /64 assigned from a /48 in the 2001:0478::/32 space may annouce that /48 to their peers. Prefix aggregates are discouraged and as a general rule may be considered to be proxy aggregations made by parties who are not direct participants in any address assignments from these ranges." --bill
participants (2)
-
bmanning@vacation.karoshi.com
-
Joe Abley