Home page logo
/

nanog logo nanog mailing list archives

Re: Private routes advertised
From: Phil Howard <phil () charon milepost com>
Date: Thu, 16 Apr 1998 16:45:32 -0500 (CDT)

administrator () lamere net put forth in cyber chatter:

Hello,
  alter.net is advertising private routes 192.168.nnn.nnn.  who do I
contact to get that shutdown?

Here is the traceroute on it.

[C:\]tracerte 192.168.2.5
 0  lamere-r1.lamere.net (206.249.60.1)  8 ms  8 ms  0 ms
 1  lamere-r1.lamere.net (206.249.60.1)  0 ms  0 ms  0 ms
 2  206.249.57.241 (206.249.57.241)  8 ms  0 ms  0 ms
 3  loki.wordwrap.net (206.249.56.1)  0 ms  7 ms  0 ms
 4  bbr2-s401-wordwrap.ctel.net (208.221.76.165)  8 ms  203 ms  180 ms
 5  905.Hssi2-0.GW1.BOS1.ALTER.NET (157.130.4.25)  31 ms  156 ms  234
ms
 6  123.ATM2-0-0.XR2.BOS1.ALTER.NET (146.188.176.238)  8 ms  24 ms  15
ms
 7  190.ATM10-0-0.XR2.EWR1.ALTER.NET (146.188.176.153)  32 ms  85 ms 
32 ms
 8  100.ATM10-0-0.TR2.EWR1.ALTER.NET (146.188.176.90)  39 ms  31 ms 
23 ms
 9  105.ATM6-0.TR2.DCA1.ALTER.NET (146.188.136.189)  24 ms  23 ms  24
ms 10  198.ATM8-0-0.XR2.TCO1.ALTER.NET (146.188.161.185)  32 ms  23 ms 
24 ms 11  192.ATM1-0-0.GW2.TCO1.ALTER.NET (146.188.160.53)  31 ms  32
ms  23 ms 12  quantum-gw.customer.alter.net (157.130.34.170)  31 ms 
31 ms  39 ms 13  192.168.4.1 (192.168.4.1)  86 ms *  93 ms
14  192.168.10.2 (192.168.10.2)  94 ms  94 ms  93 ms
15  192.168.11.23 (192.168.11.23)  94 ms  86 ms  125 ms
16  192.168.2.5 (192.168.2.5)  93 ms *

Curtis

That looks to me like alter.net is doing this just within their own
network.  If ctel.net is a customer of theirs, and and wordwrap is
a customer of ctel, maybe much of this, if not all of this, is non-BGP
and just default routed.

There's technically nothing wrong with routing private numbers within you
own net and offering that to your customers.  I just tried to traceroute
to those numbers from my MCI connection and it went into the MCI router
and died.

Is the existance of these routes causing you a problem?  Are you using BGP?
Can you filter the routes and packets in your access lists?

-- 
Phil Howard | stop8701 () spam5mer com die9spam () anyplace org suck1it1 () anyplace edu
  phil      | end3it33 () no0where com crash539 () anyplace edu die9spam () anyplace org
    at      | stop4ads () anyplace edu end9ads5 () noplace7 net stop5376 () spammer2 org
  milepost  | no6spam8 () no5where net eat1this () no5place edu no4way55 () noplace8 edu
    dot     | end5it41 () spammer6 edu die8spam () no6where org stop1313 () no7place net
  com       | a8b9c4d4 () no85ads4 org blow2me5 () spam2mer com ads8suck () no0where edu


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault