Re: IRR listing of IANA-reserved, a question..

[David Charlap <David.Charlap () marconi com>]

John M. Brown wrote:
> In the last 72 hours I've seen over 3GB of data hit a network
> I play with with source IP's of IANA-RESERVED space.

Just out of curiosity, do you know that these are bogus source 
addresses?  Some of the IANA-RESERVED block is actually valid and is 
used by IANA's computers.

My company was blocking all of the IANA-RESERVED space for a while, 
until we discovered that the IANA web server is using an address in that 
space.

Note:
        $dig www.iana.org a

        ; <<>> DiG 2.0 <<>> www.iana.org a
        ;; ->>HEADER<<- opcode: QUERY , status: NOERROR, id: 6
        ;; flags: qr rd ra ; Ques: 1, Ans: 1, Auth: 6, Addit: 6
        ;; QUESTIONS:
        ;;      www.iana.org, type = A, class = IN

        ;; ANSWERS:
        www.iana.org.   68055   A       192.0.34.69
        ...

and:
        $whois -h whois.arin.net 192.0.34.69
        IANA RESERVED-192 (NET-192-0-0-0-1)
                                          192.0.0.0 - 192.0.127.255
        ICANN
        c/o Internet Assigned Numbers Authority ICANN (NET-192-0-32-0-1)
                                          192.0.32.0 - 192.0.47.255

> Various people have reported seeing IANA-RSERVED get announced
> via BGP at different parts of the net.

Again, bogus addresses or legitimate IANA servers?  Not everything in 
IANA-RESERVED is bogus.

-- David