Re: Private routes advertised

[Phil Howard <phil () charon milepost com>]

administrator () lamere net put forth in cyber chatter:

> Hello,
>   alter.net is advertising private routes 192.168.nnn.nnn.  who do I
> contact to get that shutdown?
>
> Here is the traceroute on it.
>
> [C:\]tracerte 192.168.2.5
>  0  lamere-r1.lamere.net (206.249.60.1)  8 ms  8 ms  0 ms
>  1  lamere-r1.lamere.net (206.249.60.1)  0 ms  0 ms  0 ms
>  2  206.249.57.241 (206.249.57.241)  8 ms  0 ms  0 ms
>  3  loki.wordwrap.net (206.249.56.1)  0 ms  7 ms  0 ms
>  4  bbr2-s401-wordwrap.ctel.net (208.221.76.165)  8 ms  203 ms  180 ms
>  5  905.Hssi2-0.GW1.BOS1.ALTER.NET (157.130.4.25)  31 ms  156 ms  234
> ms
>  6  123.ATM2-0-0.XR2.BOS1.ALTER.NET (146.188.176.238)  8 ms  24 ms  15
> ms
>  7  190.ATM10-0-0.XR2.EWR1.ALTER.NET (146.188.176.153)  32 ms  85 ms 
> 32 ms
>  8  100.ATM10-0-0.TR2.EWR1.ALTER.NET (146.188.176.90)  39 ms  31 ms 
> 23 ms
>  9  105.ATM6-0.TR2.DCA1.ALTER.NET (146.188.136.189)  24 ms  23 ms  24
> ms 10  198.ATM8-0-0.XR2.TCO1.ALTER.NET (146.188.161.185)  32 ms  23 ms 
> 24 ms 11  192.ATM1-0-0.GW2.TCO1.ALTER.NET (146.188.160.53)  31 ms  32
> ms  23 ms 12  quantum-gw.customer.alter.net (157.130.34.170)  31 ms 
> 31 ms  39 ms 13  192.168.4.1 (192.168.4.1)  86 ms *  93 ms
> 14  192.168.10.2 (192.168.10.2)  94 ms  94 ms  93 ms
> 15  192.168.11.23 (192.168.11.23)  94 ms  86 ms  125 ms
> 16  192.168.2.5 (192.168.2.5)  93 ms *
>
> Curtis

That looks to me like alter.net is doing this just within their own
network.  If ctel.net is a customer of theirs, and and wordwrap is
a customer of ctel, maybe much of this, if not all of this, is non-BGP
and just default routed.

There's technically nothing wrong with routing private numbers within you
own net and offering that to your customers.  I just tried to traceroute
to those numbers from my MCI connection and it went into the MCI router
and died.

Is the existance of these routes causing you a problem?  Are you using BGP?
Can you filter the routes and packets in your access lists?

-- 
Phil Howard | stop8701 () spam5mer com die9spam () anyplace org suck1it1 () anyplace edu
  phil      | end3it33 () no0where com crash539 () anyplace edu die9spam () anyplace org
    at      | stop4ads () anyplace edu end9ads5 () noplace7 net stop5376 () spammer2 org
  milepost  | no6spam8 () no5where net eat1this () no5place edu no4way55 () noplace8 edu
    dot     | end5it41 () spammer6 edu die8spam () no6where org stop1313 () no7place net
  com       | a8b9c4d4 () no85ads4 org blow2me5 () spam2mer com ads8suck () no0where edu