[AusNOG] Speaking of ipv4 exhaustion ...

[Matt Carter]

.. Most definitely feeling your pain ..

#389xxx Unreachable sites
#Fri Sep 17 14:42:20 2010 Ticket created

:(

Maybe worthwhile mentioning, if you are a firewall admin who insists on doing this, the least you can do is keep your filters up to date.

Variety of bogons can be found here including RFC reserved and/or ipv4/6 allocated to RIR's but not yet end users, updated every 4 hours.
http://www.team-cymru.org/Services/Bogons/

Forgive me if this sound clueless, but i'm wondering, since there is obviously a few of us in the same boat, is there a resource already existing (other than "rfc ignorant" ) that one could enter a end to end connectivity issue due to suspected filters that is confirmed as only affecting freshly allocated address space?

Be nice to have a collective bat.


From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Terry Sweetser
Sent: Tuesday 14 December 2010 8:27 AM
To: ausnog (ausnog at ausnog.net)
Subject: [AusNOG] Speaking of ipv4 exhaustion ...

Now that I have your attention!

If you're in recent receipt of ipv4 space from the new /8 blocks then you'll also be feeling my pain.

If you're a lazy firewall maintainer or a complete idiot in charge of some important packet routing hardware:

 1.  you need to stop filtering these new address blocks immediately, they have (or will have) some busy internet users on them,
 2.  you need to review your firewall or wrapper settings on your authoritative DNS servers, you need to answer non-recursing DNS queries from these new addresses,
 3.  you need to read RFC1918, maybe even cover your small cubicle with its contents, so you know what you should filter.



--

Terence C. Sweetser

Engineering Manager



SkyMesh Pty Ltd

Licensed Telecommunications Carrier

ABN 62 113 609 439

37 Baxter Street

FORTITUDE VALLEY Q 4006
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20101214/8939a9ac/attachment.html>