[AusNOG] Is anyone else able to access other private networks on TPG?

[Tim March]

Good work, scooter... You've discovered something that you clearly
consider to be a security issue and chosen to post it to a public forum
before discussing it with the affected party.

Your post is posed as a question, yet you provide absolutely no
technical detail for anyone to cross-reference and validate what you're
observing.

I'm genuinely curious; what is the actual purpose of this thread?



T.

On 29/10/13 7:29 PM, Radek Tkaczyk wrote:
> For example, from one of our regular TPG Internet connections (straight
> layer 3, non MPLS)
> 
>  
> 
> C:\Documents and Settings\itadmin>tracert 192.168.3.2
> 
>  
> 
> Tracing route to 192.168.3.2 over a maximum of 30 hops
> 
>  
> 
>   1    <1 ms    <1 ms    <1 ms  192.168.1.1
> 
>   2     3 ms     3 ms     2 ms  220-244-188-61.static.tpgi.com.au
> [220.244.188.61]
> 
>   3     3 ms     3 ms     3 ms  bri-nxg-alf-csw1-ge-2-17.tpgi.com.au
> [203.29.141.21]
> 
>   4    18 ms    18 ms    18 ms  192.168.3.2
> 
>  
> 
> Trace complete.
> 
>  
> 
> Regards,
> 
>  
> 
> Radek
> 
> Ph: 0413 383 231
> 
> radek at tkaczyk.id.au
> 
>  
> 
> *From:*AusNOG [mailto:ausnog-bounces at lists.ausnog.net] *On Behalf Of
> *Radek Tkaczyk
> *Sent:* Tuesday, 29 October 2013 6:27 PM
> *To:* ausnog at lists.ausnog.net
> *Subject:* Re: [AusNOG] Is anyone else able to access other private
> networks on TPG?
> 
>  
> 
> This has been like this for ages.
> 
>  
> 
> I tried raising it with TPG about 12 months ago and the person on the
> other end didn’t even understand what I was trying to tell them, so I
> gave up. They said they would have someone follow up but obviously
> nothing has been done
> 
>  
> 
> It’s TPG so I kind of expected that answer really…
> 
>  
> 
> Regards,
> 
>  
> 
> Radek
> 
> Ph: 0413 383 231
> 
> radek at tkaczyk.id.au <mailto:radek at tkaczyk.id.au>
> 
>  
> 
> *From:*AusNOG [mailto:ausnog-bounces at lists.ausnog.net]
> <mailto:[mailto:ausnog-bounces at lists.ausnog.net]> *On Behalf Of *Josh R
> *Sent:* Tuesday, 29 October 2013 6:24 PM
> *To:* Peter Tonoli; Mischa King
> *Cc:* ausnog at lists.ausnog.net <mailto:ausnog at lists.ausnog.net>
> *Subject:* Re: [AusNOG] Is anyone else able to access other private
> networks on TPG?
> 
>  
> 
> I believe it was mentioned this was an MPLS network?
> 
> I've had this issue on TPG/PIPE MPLS before.
> 
> 
> 
> --- Original Message ---
> 
> From: "Peter Tonoli" <peter at medstv.unimelb.edu.au
> <mailto:peter at medstv.unimelb.edu.au>>
> Sent: 29 October 2013 6:06 PM
> To: "Mischa King" <mischa at webaction.com.au <mailto:mischa at webaction.com.au>>
> Cc: ausnog at lists.ausnog.net <mailto:ausnog at lists.ausnog.net>
> Subject: Re: [AusNOG] Is anyone else able to access other private      
> networks        on TPG?
> 
>  
> 
> ------------------------------------------------------------------------
> 
>     *From: *"Mischa King" <mischa at webaction.com.au
>     <mailto:mischa at webaction.com.au>>
>     *To: *"Cameron Daniel" <cdaniel at nurve.com.au
>     <mailto:cdaniel at nurve.com.au>>
>     *Cc: *ausnog at lists.ausnog.net <mailto:ausnog at lists.ausnog.net>
>     *Sent: *Tuesday, 29 October, 2013 6:26:34 PM
>     *Subject: *Re: [AusNOG] Is anyone else able to access other private
>     networks        on TPG?
> 
>     I haven't raised it yet, I was just about to.
> 
>      
> 
>     On Tue, Oct 29, 2013 at 5:25 PM, Cameron Daniel
>     <cdaniel at nurve.com.au <mailto:cdaniel at nurve.com.au>> wrote:
> 
>     What did their support line/NOC say when you raised this with them?
> 
> 
> 
>     On 2013-10-29 5:23 pm, Mischa King wrote:
> 
>         Yes this maybe true, but I can see printers, SAN, Switches even
>         Windows Server boxes that are on a private network IP.
> 
> I guess the question needs to be asked - why is RFC1918 traffic
> emanating from your network?
> 
> -- 
> 
> Peter Tonoli < peter at medstv.unimelb.edu.au
> <mailto:peter at medstv.unimelb.edu.au> > +61-3-9288-2399
> IT Manager
> The University of Melbourne - Eastern Hill Academic Centre, St.
> Vincent's Institute and O'Brien Institute
> 
> 
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> 

-- 
PGP/GNUPG Public Key: http://d3vnu11.com/pub.key