[AusNOG] Filtering Previously Unallocated Addresses

[Elly Tawhai]

_______________________________________________________________________

Filtering Previously Unallocated Addresses
_______________________________________________________________________

Hi AUSNOG Community,

APNIC recognizes that as the IANA pool of unallocated IPv4 addresses
nears exhaustion, there may be increasing community concern about the
quality of the new address blocks made available for distribution.

It is important that you ensure your router Access Control Lists (ACLs)
are updated so addresses are not mistakenly filtered through your
routers. It may also be time to consider whether you should stop any
form of BOGON filtering.

This is especially important for newly allocated address blocks:

     * 1.0.0.0/8
     * 14.0.0.0/8
     * 27.0.0.0/8
     * 36.0.0.0/8
     * 42.0.0.0/8
     * 49.0.0.0/8
     * 101.0.0.0/8
     * 223.0.0.0/8

Keep informed about IANA allocations at:

http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml

For those with recently allocated address space here are several tips
to check whether your IP Addresses are filtered:

     * Your own firewall might be blocking the new IP addresses by
       default, if you set up your servers to block bogon IP ranges. To
       avoid blocking potential new customers, consider whether you
       should stop any form of BOGON filtering.

     * Run a traceroute to see if the new IP is consistently blocked
       along the same network path. It is advisable also, to test
       forward and reverse paths. Use of technology like the Routing
       Information Service (RIS) is highly recommended to assist in
       identifying routing conditions for prefixes under test.

           http://www.ripe.net/projects/ris/index.html

     * Do a search on your IP address and contact those organizations
       that appear to be blocking you. You may be blocked due to
       activity of one of your customers.

           http://whatismyipaddress.com/blacklist-check

     * Use a looking glass service as part of the diagnostic tool, set
       to detect network filters.

           http://www.ris.ripe.net/cgi-bin/lg/index.cgi


Ongoing testing
---------------

As part of our service commitment to our Members and the wider
community, APNIC is working hard to evaluate the usability of address
space allocated to APNIC before it is distributed.

For further information on Resource Quality Assurance and the testing
results, visit:

     http://www.apnic.net/rqa

For further assistance, contact:

     helpdesk at apnic.net

____________________________________________________________________

APNIC Secretariatsecretariat at apnic.net
Asia Pacific Network Information Centre (APNIC)   Tel: +61 7 3858 3100
PO Box 2131 Milton, QLD 4064 Australia            Fax: +61 7 3858 3199
Level 1, 33 Park Road, Milton, QLDhttp://www.apnic.net
_______________________________________________________________________
   * Sent by email to save paper. Print only if necessary.