[In the message entitled "Re: small vent" on Jun 28, 14:54, Jon Lewis writes:]
On Sun, 28 Jun 1998, Mark Milhollan wrote:
"David R. Conrad" writes:
b) someone has dummied up a prefix in a mail header or something (typical) c) there is a bug in the database software (happens)
I doubt B since the IP address queried was that of the TCP peer. Granted it could have been a spoofed session, but that would have required a level of expertise that I've never seen used merely to attempt delivery of a few thousand pieces of e-mail.
What about d). Perhaps someone temporarily announced routes for unallocated space, setup a mail/spam server in that IP space, sent out their mail, and stopped exporting the route.
Is there a place one can search to see a history of BGP announcements for a given route?
This has, in fact, happened before. One of the reasons that the unallocated spaces are listed on the RBL. -- Dave Rand dlr@bungi.com http://www.bungi.com
At 12:45 PM 6/28/98 PDT, Dave Rand wrote:
This has, in fact, happened before. One of the reasons that the unallocated spaces are listed on the RBL.
This topic comes up every now and then. I've searched the ARIN site and found some very outdated lists (some as old as 1996, but none newer than Feb, 1998). I've searched the archives, but no one seems to have an answer - except you. How do you tell what is and what is not allocated? Perhaps you could export just the non-assigned blocks in the RBL? Maybe under a second AS or something? I have no problem with the RBL myself, but some of my customers want a "full table", and won't take an RBL filtered one. I do, however, filter blocks which should not be routed - e.g RFC 1918 - and would like to include the non-assigned blocks. I just can't figure out a way to automate such a process. Especially since the whois servers limit the number of queries. (I'm not complaining, I understand the reasons, I'm just stating a fact.) And, of course, if anyone else has a possible way to find out which blocks are and are not assigned, I would appreciate it. Personally, I would *love* to see such a list created, say, once a day by the proper registries, so filters can be updated in a timely, automated fashion. But that's just me. :)
Dave Rand
TTFN, patrick ************************************************************** Patrick W. Gilmore voice: +1-650-482-2840 Director of Operations, CCIE #2983 fax: +1-650-482-2844 PRIORI NETWORKS, INC. http://www.priori.net "Tomorrow's Performance.... Today" **************************************************************
At 12:45 PM 6/28/98 PDT, Dave Rand wrote:
This has, in fact, happened before. One of the reasons that the unallocated spaces are listed on the RBL.
This topic comes up every now and then. I've searched the ARIN site and found some very outdated lists (some as old as 1996, but none newer than Feb, 1998). I've searched the archives, but no one seems to have an answer - except you. How do you tell what is and what is not allocated?
Well, there is the problem of where to look. There is a pretty comprehensive list of the delegation status of blocks at the /8 level that is pretty accurate. I suspect that the RIRs can provide pretty good detail for the recent (1996 and later) delegations. The historical delegations are -much- harder to track. I've been spending some time on clearing up detail on older /8 blocks and this data may make it into the publicly visable registries if they want it. 128.0.0.0/8 is done and I've got most of 192.0.0.0/8 complete. -- bill
participants (3)
-
bmanning@vacation.karoshi.com
-
dlr@bungi.com
-
Patrick W. Gilmore