[AusNOG] Any Westnet NOC operator's onlist? Having a routing issue to one of your DSL customers...

Fri Sep 30 17:40:09 EST 2011

Hi all

It looks to me that there are two separate issues here.

The first as already discussed is that 56.6.0.0 does not belong to iiNet/Westnet. I'd suggest asking your client to get in touch with our Support team to get that sorted out - we shouldn't have such incorrect information in our records :)

The second is a blackholing issue that cropped up in response to a DDoS earlier today, affecting an upstream provider’s network. Some of our prefixes went missing within that network, but have since been restored.

Are there any outstanding connectivity issues at the minute? Feel free to contact either myself directly, or our NOC (noc at staff.iinet.net.au) if there are any current issues.

Kind Regards,

David Harmsworth
Network Engineer

iiNet Limited
Level 2, 502 Hay St, Subiaco WA 6008
email: davidh at staff.iinet.net.au

From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Chris Macko
Sent: Friday, 30 September 2011 1:58 PM
To: 'Justin Twiss'; AusNOG at lists.ausnog.net
Subject: Re: [AusNOG] Any Westnet NOC operator's onlist? Having a routing issue to one of your DSL customers...

Hi Guys,
Saw this as well, believe a problem out of Victoria as we had multiple Iinet clients calling the support guys here, saw the same black-holing outbound within Iinet on the other end of multiple connections as well. 
Kind Regards,
Chris Macko
Managing Director
Interhost Pacific Pty Ltd t/a Intervolve 
Support Phone
1300 664 574 / +61 8 8260 4237
Sales Phone
+61 3 9646 2060
Accounts Phone
+61 8 8260 4237
Office Fax
+61 8 8260 4312

Sales Email
sales at intervolve.com.au
Support Email
support at intervolve.com.au
Accounts Email
accounts at intervolve.com.au 

Website
www.intervolve.com.au

This email contains information that is confidential to the intended recipient. It may also contain information, which is subject to legal privilege. If you are not the intended recipient, you must not use, pass on or copy this message. We also ask that you notify the sender by email or telephone and destroy the original message. Thank you.

________________________________________
From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Justin Twiss
Sent: Friday, 30 September 2011 3:20 PM
To: AusNOG at lists.ausnog.net
Subject: [AusNOG] Any Westnet NOC operator's onlist? Having a routing issue to one of your DSL customers...

Hey all,

Any Westnet NOC op’s on-list?  Having a routing issue to a host on your 56.6.5.0 subnet (Client’s Westnet portal is showing that’s the IP of their service but traceroute’s to their IP from multiple external providers (Nextgen, Telstra and Amcom) are dying…

Sorry for the additional info re: traceroutes but I find it helps to have too much information initially and be able to cull unnecessary than not have enough info and needing to ask for more ☺

From the Westnet User Portal for this client:

1. Username: civicXXXX at westnet.com.au
2. Password: XXXXXXXXXX
3. Broadband phone number: (08) XXXX XXXX
4. IP address(es): 56.6.5.XX
5. Email address: civicXXXX at westnet.com.au
6. Billing email address: admin at XXXX.com.au
7. Account type: ADSL2+ Business-1

From Telstra:
#trace 56.6.5.49

Type escape sequence to abort.
Tracing the route to 56.6.5.49

  1 139.130.37.133 0 msec 0 msec 0 msec
  2 203.50.115.129 4 msec 0 msec 4 msec
  3 203.50.11.18 40 msec 32 msec 36 msec
  4 203.50.6.185 44 msec 44 msec 48 msec
  5 203.50.11.12 60 msec 60 msec 60 msec
  6  *  *  *
  7  *  *  *
  8  *  *  *
  9  *  *  *
10  *  *  *
11  *  *  *

From Nextgen (which should be routing via WAIX):

unixweb1:~# traceroute 56.6.5.49
traceroute to 56.6.5.49 (56.6.5.49), 30 hops max, 60 byte packets
1  core5406.bekkers.network (x.x.x.1)  0.327 ms  0.461 ms  0.421 ms
2  svrfw01a.bekkers.network (x.x.y.10)  0.384 ms  0.391 ms  0.400 ms
3  birx.bekkers.com.au (203.13.164.1)  0.898 ms  0.839 ms  0.801 ms
4  c-20599-1214-vaies-800-086.pr1.prth.nxg.net.au (121.200.227.137)  2.615 ms  2.991 ms  4.020 ms
5  * * *
6  * * *
7  * * *
8  * * *
9  * * *
10  * * *

From Primus’s Perth looking glass:

Tracing the route to 56.6.5.49

  1 39.207-27-211.core.pth.iprimus.net.au (211.27.207.39) 12 msec
    8.207-27-211.core.pth.iprimus.net.au (211.27.207.8) 0 msec
    7.207-27-211.core.pth.iprimus.net.au (211.27.207.7) 0 msec
  2 ge-1-1-8.csr01.syd.iprimus.net.au (203.134.2.21) 52 msec
    ge-1-0-8.csr01.equ.iprimus.net.au (203.134.2.177) 52 msec
    ge-1-1-8.csr02.syd.iprimus.net.au (203.134.2.181) 60 msec
  3 ge-1-1-9.csr02.mel.iprimus.net.au (203.134.2.213) 68 msec
    irb5.bsr02.equ.iprimus.net.au (210.50.143.164) 56 msec
    vl-60.sw01.equ.iprimus.net.au (203.134.2.102) 68 msec
  4 ge-0-1-9.bsr01.lax.iprimus.net.au (203.134.2.174) 196 msec
    ge-0-2.br03.mel.iprimus.net.au (210.50.233.202) 72 msec
    ge-0-0-8.bsr01.lax.iprimus.net.au (203.134.2.154) 196 msec
  5  * 
    ae3-165.lax20.ip4.tinet.net (77.67.78.181) !N 
    ge-1-3-0.br04.mel.iprimus.net.au (203.134.123.68) 64 msec

-JT

Justin Twiss
Hosting Manager

884 Beaufort Street, Inglewood, WA, 6052
Telephone: (08) 9422 6777
Mobile:  0405 555 044
Facsimile: (08) 9272 6625
Justin.Twiss at bekkers.com.au | www.bekkers.com.au
________________________________________