Re: Maybe I'm misreading this but...

[Jon Lewis <jlewis () inorganic5 fdt net>]

On Wed, 14 Oct 1998, Barry Shein wrote:

> The following traceroute seems to indicate, according to ARIN, that
> someone is running routers for spammers in the IANA Reserved netspace?

Nope.

> > 8  bs-jackson-gw.customer.alter.net (157.130.65.226)  107 ms  132 ms  96 ms
> > 9  172.17.80.46 (172.17.80.46)  59 ms  53 ms  44 ms
> > 10  172.21.210.18 (172.21.210.18)  122 ms  96 ms  49 ms
> > 11  209.149.111.17 (209.149.111.17)  53 ms (ttl=118!)  58 ms (ttl=118!)  150 ms (ttl=118!)

Looks to me like BellSouth is using rfc-1918 private IP space for some of
their routers.  Possible reasons are conservation of address space and
that it makes it difficult to directly access these routers from outside
their network.

I have heard of people doing temporary bogus route announcements and
running spam servers from someone else's or unallocated IP space...but I
don't think I've ever seen it first hand.  Sadly, both my upstreams have
really tight BGP filters, so I don't get to play any of these games. :)

------------------------------------------------------------------
 Jon Lewis <jlewis () fdt net>  |  Spammers will be winnuked or 
 Network Administrator       |  drawn and quartered...whichever
 Florida Digital Turnpike    |  is more convenient.
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____