nanog mailing list archives
Re: 123.45.67.89
From: Mike <mike-nanog () tiedyenetworks com>
Date: Fri, 18 Feb 2011 09:09:06 -0800
On 02/18/2011 08:59 AM, Joel Jaeggli wrote:
normally ip addresses like that just attract additional unwanted traffic towards the advertised prefix...
Way back when ml.org was first doing dynamic dns, I tried it out and gave myself 'workgroup.ml.org'. All of a sudden, I started being bombarded with windows netbios traffic from all over creation (this was like 1998 or so, don't recall exactly but it was port 137 I think). I tried to get an explanation and to divine why all of a sudden having 'workgroup.ml.org' made me a target, but I never got to the truth of it. The closest I came simply had to do with the default 'wrokgroup' name of windows 95 machines and something to do with dns/netbios resolution (bug?). It looked like it was stripping dots a little too agressively but then it's been many years and I don't do windows.
To this day I wonder seriously if 'workgroup.com' or variations had or has a similar problem....
Mike-
Current thread:
- 123.45.67.89 Robert Lusby (Feb 18)
- Re: 123.45.67.89 Joel Jaeggli (Feb 18)
- Re: 123.45.67.89 Mike (Feb 18)
- RE: 123.45.67.89 Matlock, Kenneth L (Feb 18)
- Re: 123.45.67.89 Richard Barnes (Feb 18)
- Re: 123.45.67.89 John Orthoefer (Feb 18)
- Re: 123.45.67.89 Christopher Morrow (Feb 18)
- Re: 123.45.67.89 Robert Lusby (Feb 19)
- Re: 123.45.67.89 Joel Jaeggli (Feb 18)